If you are looking for an AT&T data breach settlement claim in 2026, the available evidence says the general claim deadline passed on Dec. 18, 2025. The only later action identified is for people who already submitted claims and received a deficiency or settlement-class membership verification notice from Kroll: Bright Defense reports a Sept. 8, 2026 response deadline. A payment date has not been announced in the supplied evidence, and the official settlement notice was not provided for independent verification.
That means a person who never filed a claim should not assume a late claim is still available. A person who did file should check for a notice from Kroll and follow the instructions in that notice before the stated deadline.
What the proposed settlement covers
The reports describe one proposed $177 million class action settlement connected to two different AT&T incidents disclosed in 2024. The incidents involved different categories of information, so the reported settlement structure separates them into different classes.
The first incident became public in March 2024. Atomic Mail reports that information connected to about 7.6 million current users and 65.4 million former customers appeared in a data set posted on the dark web. The reported data included names, email or mailing addresses, phone numbers, dates of birth, AT&T account or billing account details and account passcodes. Social Security numbers were reported for some people.
The second incident was disclosed in July 2024. Reports say attackers accessed files on a third-party cloud platform containing customer call and text interaction records. The records did not consist of message content according to the supplied reporting, but interaction metadata can still show relationships, timing and communication patterns. Bright Defense says the records covered nearly all AT&T wireless customers and customers of mobile virtual network operators using AT&T’s network; it also reports that AT&T said it would notify around 110 million customers.
Who may be included
The available sources describe potential class membership by reference to the two incidents and the relevant AT&T account periods. Mashable reports that the case covered customers with accounts between 2019 and 2024, while Bright Defense describes the first incident as affecting current and former account holders and the second as involving wireless-customer call and text records.
Those descriptions are not enough to confirm an individual’s eligibility. The evidence pack does not include the official class definitions, a claim lookup tool or a court-approved notice. An AT&T customer should therefore rely on the settlement administrator’s notice or case records, not simply on having been a customer, recognizing a breach story or matching a broad date range.
What the claim amounts could depend on
The reported settlement divides the proposed fund between the two incidents. Bright Defense and Mashable describe $149 million for the first class and $28 million for the second. Reported payments could depend on whether a claimant documented financial losses, which incident applied, the number of approved claims, legal fees and final court approval.
Mashable reports that documented-loss payments were described as up to $5,000 for the first class and up to $2,500 for the second, with a theoretical combined maximum of $7,500 for someone affected by both incidents. Those are ceilings or reported claim categories, not guaranteed payments. The final amount for any claimant can change based on validation and the number of approved claims. The supplied evidence does not establish that any particular reader qualifies for a payment.
What to do if you already filed
First, search the email address and mailing address used for the claim for a deficiency or settlement-class membership verification notice from Kroll Settlement Administration. Bright Defense identifies Sept. 8, 2026 as the response deadline for claimants who received one of those notices. Follow the notice exactly and retain copies of the submission and supporting documents.
If you did not receive a notice, the available reports do not establish that your claim was approved, rejected or complete. Check the contact information used on the claim, including spam or junk folders, and use only the administrator contact details in the settlement notice or other official case material. Do not pay a third party to submit a claim or disclose account credentials to an unsolicited contact.
What to do if you never filed
The general filing window is reported as closed. The evidence supplied does not identify a late-claim exception, reopening date or separate process for people who missed the deadline. The responsible next step is to look for the official settlement administrator or court notice and confirm whether any authorized update exists; do not treat a general breach report as proof that a late claim can be filed.
Regardless of settlement eligibility, the reported incidents involve information that can support phishing, account takeover or identity-fraud attempts. Atomic Mail advises changing reused passwords, enabling strong two-factor authentication, securing the email account connected to mobile service, monitoring financial and mobile-account activity and watching for phishing. These are protective steps, not evidence that a particular person suffered a loss.
What remains unresolved in 2026
Bright Defense reports that final approval was still pending as of Aug. 29, 2026, following a hearing on Jan. 15, 2026, and that no payment date had been announced. Mashable describes a June court action involving the settlement, but the supplied reports do not resolve whether that action constituted final approval or how it relates to the later pending-status report.
That conflict is the key evidence boundary. The available reporting supports the closed claim deadline and the conditional Sept. 8 response date, but it does not replace the official order or administrator notice. Until those documents establish final approval, validated claims and payment timing, readers should treat payout figures as reported possibilities rather than promised compensation.
The useful 2026 question is no longer how to start an AT&T settlement claim: the reported general filing window closed on Dec. 18, 2025. The remaining decision is narrower. People who already filed should determine whether Kroll sent a deficiency or settlement-class verification notice and, if so, respond by the reported Sept. 8, 2026 deadline. The proposed $177 million fund is tied to two incidents with different data and reported payment limits, but approval, validation and payment timing remain uncertain. Because the supplied evidence lacks the official court order and settlement notice, customer status or breach exposure alone cannot establish eligibility or a payout.
Sources and methodology
- AT&T Data Breach Settlement Claim 2026 Guide - https://atomicmail.io/blog/at-t-data-breach-settlement-full-guide
- AT&T Data Breach Settlement Offers Up To $5k in Claims - Bright Defense - https://www.brightdefense.com/news/att-data-breach
- AT&T data breach settlement: How to file a claim before Dec. 18 - Mashable - https://mashable.com/article/att-data-breach-settlement-claim-7500-dollars
- AT&T Data Breach: Check Status, File a Claim & Payout - DeXpose - https://www.dexpose.io/att-data-breach
