Comcast has agreed to a $117.5 million class action settlement covering current and former Xfinity customers whose personal information was exposed in an October 2023 cyberattack on the company’s systems. The settlement, formally known as Hasson v. Comcast Cable Communications LLC, resolves claims stemming from a breach that affected approximately 35 million people — one of the largest telecommunications data breaches in recent years.
If you received a data breach notice from Comcast in December 2023, you are likely a class member and can file a claim through the extended deadline of September 14, 2026. Consider a typical affected customer: someone who subscribed to Xfinity internet service in 2023, received a notification letter that December stating their username, hashed password, and possibly partial Social Security number or date of birth had been compromised, and then spent hours changing passwords and monitoring accounts. Under this settlement, that person can claim either a pro-rata cash payment estimated at around $50, or — if they suffered documented losses like fraud charges or paid credit monitoring — reimbursement of up to $10,000 in out-of-pocket costs. All class members also automatically receive three years of identity monitoring, whether they file a claim or not.
Table of Contents
- Who Is Covered by the Comcast Data Breach Settlement?
- How the $117.5 Million Settlement Fund Is Divided
- The October 2023 Xfinity Breach Behind the Lawsuit
- How to File a Claim Before the September 14, 2026 Deadline
- Opt-Outs, Objections, and the Final Approval Hearing
- The Automatic Identity Monitoring Benefit
- Watch for Settlement Scams Targeting Class Members
- Frequently Asked Questions
Who Is Covered by the Comcast Data Breach Settlement?
The class covers U.S. residents who received a notice from Comcast in December 2023 informing them that their personal information was involved in the October 2023 security incident affecting Xfinity systems. That notification letter is the key eligibility marker. Roughly 35 million current and former customers fall into this group, which means the class is unusually large even by data breach standards — comparable in scale to breaches at major credit bureaus and health insurers rather than typical regional incidents. Importantly, you do not need to be a current Xfinity subscriber to qualify.
Former customers whose data remained in Comcast’s systems at the time of the attack were also exposed and also received notices. If you moved, canceled service, or switched providers before October 2023 but still got a breach letter, you are in the class. By comparison, some data breach settlements limit eligibility to active account holders at the time of the incident; this one does not, which substantially widens the pool of eligible claimants. If you believe your data was exposed but cannot locate your notice, the settlement administrator can verify class membership. The official settlement website, www.comcastbreachsettlement.com, is the authoritative resource for confirming eligibility and filing.
How the $117.5 Million Settlement Fund Is Divided
The settlement offers two mutually exclusive payment tracks. The first is a pro-rata cash payment, currently estimated at around $50 per claimant, which requires no documentation of harm — you simply attest to class membership and file. The second is reimbursement of documented out-of-pocket losses up to $10,000, intended for people who can show actual costs fairly traceable to the breach: fraudulent charges, fees for credit freezes or monitoring services, bank fees, or costs of replacing compromised accounts. Claimants on the documented-loss track can also seek lost-time compensation of up to $150 for hours spent dealing with the fallout. A significant limitation: the $50 figure is an estimate, not a guarantee.
Pro-rata means the actual amount depends on how many valid claims are filed against the fund after attorneys’ fees, administration costs, and the identity monitoring program are paid. With a class of 35 million, even a modest claims rate could push individual payments below the estimate — this is a common pattern in mega-class settlements, where headline numbers and final checks often diverge. Anyone counting on a specific dollar amount should temper expectations until distribution. The documented-loss track carries its own tradeoff. The $10,000 ceiling is generous compared to many breach settlements, but claims require real proof — receipts, statements, police reports, or similar records. Vague or undocumented submissions on that track are routinely reduced or denied by settlement administrators.
The October 2023 Xfinity Breach Behind the Lawsuit
The settlement traces back to a cyberattack on Comcast’s Xfinity systems in October 2023. Attackers exploited a vulnerability to access customer data, and Comcast notified affected customers in December 2023 — a roughly two-month gap between intrusion and notification that became one of the points of contention in the litigation. The exposed data for roughly 35 million people made the incident a major event in the telecommunications sector.
The consolidated class actions, resolved under the caption Hasson v. Comcast Cable Communications LLC, alleged that Comcast failed to adequately safeguard customer information and to respond appropriately once the intrusion occurred. As is standard in class settlements, Comcast has not admitted wrongdoing; the company agreed to the $117.5 million fund to resolve the claims without a trial. For context, that figure places this among the larger consumer data breach settlements of the past several years, though still well below the roughly $700 million Equifax resolution that remains the benchmark for breach litigation.
How to File a Claim Before the September 14, 2026 Deadline
Claims can be filed online at www.comcastbreachsettlement.com or by mailing a paper claim form, and must be submitted by 11:59 p.m. ET on September 14, 2026. That deadline was extended from the original August 14, 2026 cutoff, giving class members an extra month. Recent coverage, including a Lower Bucks Times report from July 14, 2026, confirms the claims window remains open through the extended date.
When filing, you must choose between the two payment tracks — you cannot claim both the pro-rata payment and documented-loss reimbursement. The practical tradeoff: the pro-rata option is fast and requires no paperwork beyond identifying information, while the documented-loss option can pay substantially more but demands evidence and takes more effort to assemble. If your breach-related costs were minimal, the pro-rata payment is usually the sensible choice; if you experienced actual fraud or paid for monitoring out of pocket, gather your records before the deadline rather than settling for the smaller flat payment. Online filing is generally processed faster and gives immediate confirmation, whereas mailed forms must be postmarked in time and carry the risk of postal delays. Whichever route you take, keep a copy of your submission and any confirmation number.
Opt-Outs, Objections, and the Final Approval Hearing
Class members who preferred to preserve their right to sue Comcast individually had to opt out by July 1, 2026 — a deadline that was itself extended from June 1, 2026. The same July 1 date applied to objections, meaning class members who wanted to challenge the settlement’s terms before the court. With that deadline now passed, remaining class members are bound by the settlement’s release of claims once it receives final approval. The final approval hearing is scheduled for August 5, 2026 at 12:30 p.m. ET at the James A.
📨 Get Free Mass Tort Guides Alerts
Free · No spam · Unsubscribe anytime
Byrne U.S. Courthouse, 601 Market Street, Philadelphia, PA 19106 — rescheduled from its original July 7 date. This is a meaningful caution for anyone expecting a quick check: no payments will be distributed until the court grants final approval and any appeals are resolved. In large settlements, appeals by objectors have delayed distributions by a year or more, so filing a claim by September 14 secures your place in line but does not guarantee a payment date. Note that a payment cannot arrive before the process completes even for early filers, and the settlement administrator — not Comcast customer service — handles all claim questions. Comcast retail and support channels cannot check claim status.
The Automatic Identity Monitoring Benefit
Separate from any cash payment, every class member receives three years of CyEx Financial Shield identity monitoring plus $1 million in identity theft insurance — automatically, with no claim required. For a customer who never files a claim form, this is still a tangible benefit: comparable commercial identity monitoring services typically run $10 to $20 per month, so three years of coverage represents several hundred dollars of retail value. Class members should watch for enrollment instructions through the settlement administrator rather than assuming coverage activates on its own.
Watch for Settlement Scams Targeting Class Members
Large, well-publicized settlements reliably attract impostors, and a 35-million-person class is an attractive target. Legitimate communications about this settlement come from the court-appointed administrator via www.comcastbreachsettlement.com; the administrator will never ask for a full Social Security number by phone, demand a processing fee, or request gift cards or wire transfers to “release” a payment.
Filing a claim is free. If you receive a call or text claiming you must pay to receive your Comcast settlement money, it is a scam — real class action payouts never require upfront payment, and claim filing happens only through the official website or the official mailed form.
Frequently Asked Questions
How much can I get from the Comcast data breach settlement?
You can choose either a pro-rata cash payment estimated at around $50, or reimbursement of documented out-of-pocket losses up to $10,000 plus up to $150 for lost time. The pro-rata amount may change depending on how many claims are filed.
What is the deadline to file a claim?
Claims must be filed by 11:59 p.m. ET on September 14, 2026, either online at www.comcastbreachsettlement.com or by mailed paper form. This deadline was extended from August 14, 2026.
Who is eligible for the settlement?
U.S. residents who received a data breach notice from Comcast in December 2023 about the October 2023 Xfinity security incident. Both current and former customers qualify.
Do I get anything if I don’t file a claim?
Yes. All class members automatically receive three years of CyEx Financial Shield identity monitoring and $1 million in identity theft insurance, even without filing.
When will payments be sent?
Not until after the court grants final approval. The final approval hearing is set for August 5, 2026 in Philadelphia, and any appeals could delay distribution further.
Can I still opt out of the settlement?
No. The opt-out and objection deadline was July 1, 2026 (extended from June 1, 2026) and has passed.
You Might Also Like
- Cadence Bank MOVEit Data Breach Settlement Offers Payments for Exposed Customer Data
- Sprouts Farmers Market Receipt Settlement Claims Customers Received Noncompliant Card Receipts
- Trader Joe’s Receipt Settlement Claims Card Numbers Were Printed Improperly