AT&T customers who filed claims in a $177 million data-breach settlement may receive as little as $6.50, while plaintiffs’ lawyers collect $59 million in fees.
A federal judge in Dallas gave final approval on Oct. 2 to AT&T’s $177 million settlement covering two 2024 data breaches that exposed personal information belonging to millions of customers.
Yahoo Finance reported that U.S. District Judge Sidney Fitzwater signed off on the deal and on $59 million in attorneys’ fees, clearing the way for tiered cash payments that court documents put in a range of about $6.50 to $40 for most claimants.
That gap between what the lawyers take home and what ordinary customers stand to receive is the heart of the story. The company that lost the data pays a headline number. The bar collects tens of millions. The people whose Social Security numbers and other personal details were exposed get pocket change unless they can document out-of-pocket losses.
The settlement splits into two funds tied to the separate 2024 incidents. Court documents assign $149 million to the AT&T 1 class and $28 million to the AT&T 2 class.
Customers who did not prove documented losses fall into a tiered payment system after expenses and documented-loss claims come out first. Estimates in the court papers run this way:
Those figures are estimates. Final amounts depend on a pro rata calculation once documented-loss payments and costs are subtracted from each fund. In plain terms, the more valid claims that pile in, the thinner each check gets.
Claimants who can show documented losses tied to the breaches may recover more. Caps sit at up to $5,000 for the AT&T 1 class and up to $2,500 for the AT&T 2 class.
The settlement website description says qualifying losses can include certain expenses related to fraud or identity theft. Medical bills, emotional distress, and estimated lost wages were not eligible. Documented losses must be “fairly traceable” to a data incident, the standard used in the court materials.
That bar matters. A customer who spent money freezing credit, buying monitoring, or cleaning up fraudulent charges may recover something real. A customer who simply had data exposed and filed a basic claim is looking at the single-digit or low-double-digit tiers.
As of Aug. 24, 2026, the court’s final approval order tallied 4,918,073 claim forms. That broke down to 754,263 paper claims and 4,163,810 electronic claims, nearly five million people raising their hands after the breaches.
Volume on that scale is why the per-person math compresses so hard. A $177 million pot sounds large until it is divided across millions of claimants, administrative costs, and a $59 million fee award.
Dozens of objections hit the settlement before final approval. Some objectors argued the total was inadequate when stacked against a $350 million settlement in separate litigation involving T-Mobile.
Judge Fitzwater approved the AT&T deal anyway. The court accepted the structure, the fee request, and the payment framework over those challenges. Customers who wanted a larger corporate depreciation did not get it.
The comparison is useful for national readers. Two major wireless carriers. Separate breach litigation. One settlement more than twice the size of the other. AT&T’s number stuck at $177 million, with most individuals steered into modest automatic tiers unless they documented specific losses.
The 2024 incidents exposed personal information for millions of AT&T customers. For the highest tier, that included Social Security numbers, the kind of data criminals use for fraud and identity theft years after a breach hits the news.
The settlement does not unwind that exposure. It offers cash and a claims process. People who already spent time and money protecting themselves must still prove those costs were “fairly traceable” to the incidents. Everyone else lands in the estimated $6.50-to-$40 band.
Plaintiffs’ lawyers, by contrast, secured a $59 million fee award as part of the same Oct. 2 approval. That is roughly one-third of the total settlement value going to counsel rather than to the class in direct payments.
Corporate data security failures keep producing the same pattern: years of litigation, a large-sounding fund, a substantial fee order, and small individual checks for the people who lived with the risk. AT&T’s deal fits that mold. Customers get a few dollars or a few dozen. The lawyers get eight figures. The data stays out in the wild.
When a company loses millions of customers’ personal information and the remedy is a coffee-money check for most claimants, the public should notice who got paid and who got protected.