Published October 12, 2026

On October 2, 2026, a federal judge in Texas gave final approval to AT&T's $177 million settlement over two 2024 data breaches that exposed records of more than 100 million customers. Close to 5 million people filed a claim. Over a million of those claims were rejected, and about 800,000 of them were thrown out as fraudulent.

That's the data breach settlement business in a nutshell: real money for people who were affected, a lot of confusion about who qualifies, and plenty of people trying to cash in. Here's how these settlements actually work, how to file a claim that gets paid, and how to tell a real settlement site from a fake one.

What a Data Breach Settlement Actually Pays

When a company is sued over a breach, it usually settles instead of going to trial. It pays a fixed amount into a fund, and a settlement administrator (companies like Kroll, Epiq or Angeion) splits that fund among the people who file valid claims. Most settlements offer some mix of these:

• A flat cash payment that you get just for being affected. No receipts needed.
• Reimbursement for documented losses, such as fraudulent charges, fees for a credit freeze or the cost of replacing documents. This is where the big "up to $5,000" numbers come from, and you need proof.
• Payment for lost time, usually a few hours at a fixed hourly rate, for time spent dealing with the breach.
• Free credit or identity monitoring, often offered as an alternative to cash.

The flat payment is almost always pro rata: the fund is divided by the number of valid claims, after attorney fees and administration costs are taken out. The more people file, the less each person gets. Here's what the AT&T estimates look like:

So the headline "up to $7,500" is real, but it only applies if you can document thousands of dollars in losses from both breaches. Most people will get a check for under $50. About $59 million of the fund went to attorney fees and another $18.9 million to administration so far.

How to Know If You're Eligible

Every settlement defines a class: the group of people it covers. It's usually something like "everyone whose data was involved in the breach announced on [date]." There are three common ways to find out you're in it:

1. You got a notice. Administrators email or mail notices to people on the company's list, often with a Class Member ID that makes filing faster.
2. You got a breach letter earlier. If a company told you your data was exposed, you're very likely in the class once a settlement is announced, even if no notice reaches you.
3. Your email shows up in the breach. Companies don't always have current contact details. Run your address through the Data Breach Check to see which known breaches it appears in, then search for "[company name] data breach settlement" to see if one exists.

No notice doesn't mean no money. Many settlements let you file without a Class Member ID by confirming your details, as long as you match the class definition.

How to File a Claim, Step by Step

1. Find the official settlement website

Every real settlement has one. It's listed in the court-approved notice and usually has a plain name built from the case, like [company]datasettlement.com. Look for the case name, the court, the docket number and the name of the administrator. Don't trust a link just because it showed up in an email. The section on fake sites below explains why.

2. Gather your proof before you start

For a flat payment you usually need nothing more than your name, address and Class Member ID. For documented losses, collect what you can: bank or card statements showing fraudulent charges, receipts for credit freeze or monitoring fees, and notes on how many hours you spent on the problem. Claims for losses without proof are the first ones to get rejected.

3. Fill out the claim form carefully

Use the same name and address the company had on file. You'll sign the form under penalty of perjury, so only claim losses you can actually connect to this breach. Choose your payment method. Many administrators offer electronic options like PayPal, Venmo, Zelle or a virtual prepaid card, which arrive faster and don't get lost in the mail.

4. Save your confirmation and watch for deficiency notices

Screenshot or save the confirmation number. If something in your claim is incomplete, the administrator sends a deficiency notice with a deadline to fix it. In the AT&T case, people who ignored those notices risked losing their payment. Keep an eye on your spam folder.

How to Spot a Fake Settlement Site

Big settlements attract scammers. After the Equifax breach, the FTC warned that fake websites were posing as the official claim site. The goal is either to collect your personal information or to charge you a "processing fee." Watch for these red flags:

• Any fee. Real settlements never charge you to file a claim or to release your payment.
• Requests for your full Social Security number, passwords or your online banking login. Only enter payment details on the official site you reached yourself.
• Pressure. "Claim in the next 24 hours or lose your $7,500" is a scam script. Real deadlines are weeks or months long and printed in the court notice.
• No case details. A real notice names the court, the case and the administrator. If you can't find the same case by searching for it yourself, walk away.
• A brand-new domain. Check when the domain was registered with the free ICANN Lookup. An official site is usually registered months before the claim deadline. A domain created last week that claims to handle a big settlement deserves suspicion.

Why the Money Takes So Long

Filing is the easy part. Before anyone gets paid, the court has to give final approval, the time to appeal has to run out, and the administrator has to review every claim and weed out fraud. If someone appeals the approval, payments can be delayed by months or even years. The AT&T breaches happened in 2024, the deadline to file was December 2025, and the checks still haven't gone out.

That's why a settlement is a small consolation, not a fix. The data that leaked doesn't come back.

Don't Wait for the Check to Protect Yourself

By the time a settlement pays out, the stolen data has usually been sold and resold for years. What protects you is what you do right after a breach:

• Check which breaches your email appears in with the Data Breach Check and follow the steps it lists for each one.
• Make sure the passwords you still use haven't leaked, using the Password Breach Check. Attackers try stolen passwords on every other site you use.
• If your Social Security number was exposed, freeze your credit at Equifax, Experian and TransUnion. It's free and takes about 15 minutes.
• Expect more phishing. Breach data gives scammers your name, phone number and the companies you do business with, which is exactly what they need for a convincing message, including fake settlement notices.

Data breach settlements will keep coming. US companies are on pace to pay more than $1.4 billion this year over claims that their websites and apps shared personal data without permission. File when you qualify, use the official site, and treat every unexpected "you're owed money" message as a scam until you've proved otherwise.