---
title: "AT&T Wrote a $177 Million Check and Most Customers Will Cash One for Eight Bucks"
description: "When Senior Judge Sidney Fitzwater signed off on AT&T's $177 million data breach settlement on October 2, 2026, the actual numbers from the Memorandum Opinion and Order got lost in the headlines promising payments \"up to $7,500.\" The real numbers"
url: https://kaynemcgladrey.com/blog/att-wrote-a-177-million-check-and-most-customers-will-cash-one-for-eight-bucks/
date: 2026-10-20
modified: 2026-10-20
author: "Kayne"
image: https://kaynemcgladrey.com/wp-content/uploads/2026/10/Low-angle-shot-of-the-ATT-building-amidst-other-skyscrapers-on-a-cloudy-day.webp
categories: ["Blog"]
type: post
lang: en-US
---

# AT&T Wrote a $177 Million Check and Most Customers Will Cash One for Eight Bucks

When Senior Judge Sidney Fitzwater signed off on AT&T’s $177 million data breach settlement on October 2, 2026, the actual numbers from the [Memorandum Opinion and Order](https://www.telecomdatasettlement.com/files/Memorandum%20Opinion%20and%20Order.pdf) got lost in the headlines promising payments “up to $7,500.” The real numbers put most claimants in line for between $6.50 and $8.10.

## Two Breaches, One Bill

The settlement covers two incidents AT&T would rather you conflate.

**The March 2024 dump.** Data tied to roughly 73 million current and former account holders, including Social Security numbers (SSNs), surfaced on a dark web forum. The [Master Class Action Complaint](https://www.telecomdatasettlement.com/files/AT&T%20Data%20Incident%20Settlement%20-%20Master%20Class%20Action%20Complaint.pdf) alleges the breach happened in 2019, and that AT&T spent three years denying the data came from its systems. By 2021 AT&T was still saying the data “does not appear to have come from our systems.”

**The July 2024 download.** A threat actor tracked as UNC5537 pulled call and text metadata for nearly all AT&T cellular customers from a Snowflake-hosted cloud workspace that lacked multi-factor authentication (MFA). No names, no SSNs, no message content. Metadata alone, for a data window stretching back to May 2022.

Two incidents, one omnibus deal, and a paper trail worth reading closely.

## Where the $177 Million Actually Goes

The money splits into two non-reversionary funds per the [Settlement Agreement](https://www.telecomdatasettlement.com/files/AT&T%20Data%20Incident%20Settlement%20-%20Settlement%20Agreement.pdf), $149 million for the first incident and $28 million for the second. Before any class member sees a dime, three groups get paid first.

- **Class Counsel took exactly one-third.** The final order approved $49,666,666.66 for the AT&T 1 lawyers and $9,333,333.33 for the AT&T 2 team, a $59 million total that carried lodestar multipliers of 3.86 and 3.73.
- **Litigation costs and service awards** added $1.06 million and $54,000 respectively, the latter spread across 36 class representatives.
- **Kroll’s administration bill** reached $18,856,175.48 approved, with $4,008,426.50 more pending.

### What Lands in a Checking Account

The parties reported 96,739,279 class members across three buckets, 53,978,019 in the first fund, 36,478,631 in the second, and 6,282,629 who fall in both. The filing never says whether the two class totals already include those overlap members, so the count of unique individuals is somewhere between 84 million and 97 million depending on how you read it. Either way, divide what survives the fees and administration by a class that size, and the tier payments in the final opinion stop being surprising.

| Tier | Payment Range |
| --- | --- |
| Top (SSN exposed, AT&T 1) | $39-$40 |
| Middle (AT&T 1, no SSN) | $7.50-$8.10 |
| Bottom (AT&T 2) | $6.50-$7.10 |

The $7,500 in the headlines is technically real. It’s the combined cap on documented losses across both funds, $5,000 plus $2,500, and it demands receipts “fairly traceable” to the breach under the [settlement FAQ](https://www.telecomdatasettlement.com/faq). Medical bills, emotional distress, credit score damage, and self-performed cleanup work don’t count.

## The Admin Bill More Than Tripled and Nobody Blinked

Kroll’s original administration estimate ran $5,453,185.00. The approved total hit $18.86 million, with $4 million reserved on top, roughly a 246 percent increase on a fund that exists to compensate breach victims. The opinion doesn’t fully explain the gap, though it hints at one driver, which is fraud screening at industrial scale. About 804,000 claims, 16 percent of everything submitted, were declined by a vendor called Covalynt using a methodology whose details were withheld from its public declaration on trade-secrets grounds.

So hundreds of thousands of people learned they didn’t qualify through a process the public can’t inspect. A claim rate in the low single digits against a class this size is normal for breach settlements. More than a tenth of the payout pool going to notice campaigns, claims processing, and unauditable fraud screens is less normal.

> “Every dollar that is paid for administration represents one dollar less that is available for Settlement Class Members.”

Judge Fitzwater, in the opinion.

## Nine Months From Hearing to Ruling

The fairness hearing took place January 15, 2026 and ran three hours and 23 minutes. Final approval landed October 2, 2026. The [CourtListener docket](https://www.courtlistener.com/docket/68394437/in-re-att-inc-customer-data-security-breach-litigation/?filed_after=&filed_before=&entry_gte=1&entry_lte=542&order_by=asc) shows three separate obstructions stacked on top of each other.

| Date | What Happened |
| --- | --- |
| July 21, 2025 | Objectors Massen, Jones, and Savala filed an interlocutory appeal of preliminary approval |
| October 3, 2025 | Court extended opt-out deadlines, pushed hearing from December 3 to January 15 |
| October 21, 2025 | Interlocutory appeal dismissed by joint motion |
| February-June 2026 | Additional opt-out briefing, updated Kroll declarations |
| August 14, 2026 | Judge Ada Brown, presiding since April 2024, recused herself |
| August 17, 2026 | Case reassigned to Senior Judge Fitzwater |
| October 2, 2026 | Final approval signed |

The recusal is the piece most news outlets missed. A new judge inheriting a docket north of 500 entries doesn’t produce a 73-page opinion overnight, and the timeline reflects that. The procedural history, from multidistrict litigation (MDL) consolidation in June 2024 through the October 2025 appeal dismissal, shows how much a settlement’s timeline bends to things like a recusal.

## The Opt-Out War

Law firms managed to solicit 9,628 opt-out requests from a class of tens of millions. The court honored 2,826 of them.

| Who Filed | Requested | Accepted |
| --- | --- | --- |
| Swigart Law Group | 5,999 | 0 (e-signatures failed the wet-signature rule) |
| Harrer Law / Potter Handy | 2,332 | 2,332 |
| All others | 1,297 | 494, with 803 more rejected as late or non-compliant |
| **Total** | **9,628** | **2,826** |

The 494 in the bottom row are the only opt-outs that arrived on their own, timely and compliant. Everything else was law-firm machinery, and most of that machinery failed.

The [final order](https://www.telecomdatasettlement.com/files/Memorandum%20Opinion%20and%20Order.pdf) is unsparing about one firm in particular. The court found Potter Handy “arguably misrepresented the facts” when telling clients they could pursue individual suits despite the arbitration agreements most had signed. AT&T’s misleading-solicitation claims against these firms didn’t die; they just got routed into individual arbitrations, one by one.

The economics of pulling someone out of a class to sue a massive corporation individually over an $8 claim doesn’t survive contact with basic math. But the [Preliminary Approval Order](https://www.telecomdatasettlement.com/files/AT&T%20Data%20Incident%20Settlement%20-%20Preliminary%20Approval%20Order.pdf)‘s wet-signature requirement did exactly what it was designed to do, which is prevent aggregator-driven exits from gutting the class.

## One Objection Landed

Objectors threw the full playbook at this deal, and the scorecard is lopsided. Reverse auction theory, overbroad releases, missing credit monitoring, a challenged damages model lifted from Comcast litigation, and the fee request itself all went nowhere. Fitzwater even made express findings under the Rules Enabling Act because he expects an appeal, which tells you how the objectors took the news.

The cy pres objection landed clean. The proposed residual-fund recipient, the Texas Bar Foundation, had nothing to do with data breach victims, and Fitzwater said so in the opinion’s own words.

> “The nexus to data breach victims specifically is indirect.”

Residual funds now get considered for redistribution to claiming class members first, with a replacement recipient still unnamed. Courts waving through bar foundations as charity-of-last-resort is a longstanding habit in class action practice. This one didn’t fly here.

## Loose Ends

A few items survive the final order:

- The replacement cy pres recipient hasn’t been named
- $4 million in Kroll administration costs still awaits judgment
- A Rules Enabling Act appeal could still scramble the release structure

## What the Security Crowd Should Take From This

The Federal Communications Commission (FCC)’s 2024 consent decree, quoted in the complaint, faulted AT&T for data left in a vendor’s cloud environment for many years after it should have been deleted. That sentence alone is the reason AT&T’s out $177 million.

> (Data) “remained in the vendor’s cloud environment for many years after it should have been deleted.”

Third-party cloud hygiene, MFA on data platforms, and prompt disclosure are the difference between an incident you patch and an MDL that eats three years of your legal budget. Equifax paid $425 million. T-Mobile paid $350 million. AT&T’s bill came in at $177 million, and nearly $80 million of it never touched a customer’s bank account, absorbed instead by fees, administration, and screening.

The number on the press release and the number on the check were never the same number.