Comcast Xfinity $117.5M Data Breach Settlement, How to Claim Your $50 Cash or Up to $10,000 for Real Losses July 1 is Deadline 

The Comcast Xfinity data breach settlement is a data privacy class action where current and former Xfinity customers whose personal information was stolen in October 2023 can receive a flat $50 cash payment or up to $10,000 for documented losses — plus three years of free identity monitoring — by filing a claim at ComcastBreachSettlement.com before September 14, 2026. Comcast denies that it engaged in any wrongdoing or violated any law.

Quick Facts: Hasson v. Comcast Cable Communications LLC, No. 2:23-cv-05039-JMY

Field	Detail
Settlement Amount	$117,500,000
Claim Deadline	September 14, 2026
Opt-Out / Objection Deadline	July 1, 2026
Who Qualifies	U.S. residents sent a Comcast data breach notice around Dec. 18, 2023
Flat Cash Payment	~$50 (no documentation required)
Documented Loss Payment	Up to $10,000
Lost Time Payment	Up to 5 hours at $30/hour ($150 max)
Free Identity Monitoring	3 years — CyEx Financial Shield, $1M identity theft insurance
Proof Required	No for flat payment; yes for documented losses
Settlement Status	Preliminarily approved January 16, 2026
Court	U.S. District Court, Eastern District of Pennsylvania
Administrator	Kroll Settlement Administration LLC
Official Website	ComcastBreachSettlement.com
Final Approval Hearing	August 5, 2026, 12:30 p.m. ET — Philadelphia, PA
Last Updated	May 16, 2026

Current Status of the Comcast Settlement

• Preliminary approval granted January 16, 2026 — the claim portal is live now
• The opt-out and objection deadline is July 1, 2026 — if you want to keep your right to sue Comcast separately, you must act before this date
• The Final Approval Hearing is scheduled for August 5, 2026 at 12:30 p.m. ET at the James A. Byrne U.S. Courthouse, 601 Market Street, Philadelphia, Pennsylvania
• Claim forms must be submitted online by September 14, 2026 or mailed postmarked by that date

What Is the Comcast Xfinity Lawsuit About? Hasson v. Comcast Cable Communications LLC, No. 2:23-cv-05039-JMY

On October 25, 2023, Xfinity discovered suspicious activity and subsequently determined that between October 16 and 19, unauthorized access to its internal systems had occurred. Hackers got in by exploiting a critical flaw in Citrix networking software Comcast used — a vulnerability known as “CitrixBleed” (CVE-2023-4966). Citrix released a patch for the flaw on October 10, 2023, but attackers had been abusing it as a zero-day vulnerability since late August 2023. Comcast applied the patch thirteen days after it was available — after the breach had already happened.

During the breach, attackers were able to access 35.8 million customers’ usernames and hashed passwords. For some customers, other personal information was exposed, including names, contact information, the last four digits of Social Security numbers, dates of birth, and secret questions combined with their answers. Comcast did not publicly disclose what happened until December 18, 2023 — two months after discovering the intrusion.

That delay is central to the lawsuit. Plaintiffs allege Comcast violated the federal Cable Act and multiple state consumer protection statutes by failing to protect personal data and by waiting too long to warn the tens of millions of people affected. The class action also names Citrix Systems Inc. and Cloud Software Group Inc. as defendants alongside Comcast. If you’ve followed other data breach compensation cases in the telecom space — like the AT&T breach settlement — this case follows the same legal pattern: inadequate security, delayed disclosure, and real consumer harm. For background on how data breach class actions work, see AllAboutLawyer.com’s consumer data privacy lawsuit guide.

Do You Qualify for the Comcast Data Breach Settlement?

You are included in this settlement as a class member if you were sent a notice of the data breach on or around December 18, 2023, informing you that your personal information may have been compromised. Check your December 2023 email inbox and physical mail for a notification from Comcast or Xfinity about a security incident.

If you can’t find your original notice, don’t assume you’re out. You can use the ID Look Up Form on ComcastBreachSettlement.com to check whether Comcast’s records identify you as a class member, or call the settlement administrator at (833) 319-2401.

Related article: Fidelity Investments Data Breach Settlement, Were Your Bank Account Numbers Exposed? Claim Up to $5,000 Before July 27

You may qualify if:

• You are a U.S. resident or U.S. territory resident who received an individual Comcast breach notification around December 18, 2023
• You were a current or former Xfinity customer at the time of the breach — you do not need an active account today
• Your personal data — username, hashed password, contact info, partial Social Security number, date of birth, or security questions — was among the information accessed

You do NOT qualify if:

• You are a Comcast officer, director, or employee
• You already filed a written arbitration demand against Comcast related to this breach and signed a release of your claims
• You timely submit a written request to opt out before July 1, 2026

For context on how this fits into the broader landscape of identity theft lawsuits against major corporations, see AllAboutLawyer.com’s data breach class action settlement tracker.

How Much Can You Get from the Comcast Settlement?

Most people think this settlement is just a small check. It isn’t — if you dealt with actual fraud or identity theft after October 2023, there is real money available. There are four benefit options:

Option 1 — Flat $50 Cash Payment (no documentation needed) Class members may claim a flat alternative cash payment of approximately $50 with no proof required. You need your Class Member ID from the breach notice to file. The $50 is subject to pro rata adjustment — it could go up or down depending on how many total claims are filed.

Option 2 — Documented Out-of-Pocket Losses (up to $10,000) Eligible customers can file a claim for reimbursement of documented out-of-pocket losses — such as costs related to identity theft, credit monitoring services, or credit freezes incurred after October 16, 2023 — up to a cap of $10,000. Supporting documentation may include bank or credit card statements showing unreimbursed fees or fraudulent charges, invoices, receipts, police reports, and other proof of fraud or identity theft.

Option 3 — Lost Time Reimbursement (up to $150) Customers who spent time dealing with fraud or taking preventative measures can claim up to five hours of lost time at $30 per hour. Lost time claims require a self-certified attestation explaining how you spent the time and how it was related to the data breach.

Option 4 — Free Identity Monitoring (automatic, no claim needed) All class members automatically receive three years of CyEx Financial Shield identity monitoring with $1 million in identity theft insurance. This kicks in after final approval — check ComcastBreachSettlement.com for the enrollment link. Identity monitoring enrollment codes were included in your breach notification. To pre-enroll, visit app.financialshield.com/enrollment/activate/comcastfs.

How to File Your Comcast Breach Claim — Step by Step

Step 1 — Go to ComcastBreachSettlement.com — this is the only court-authorized claim site

Step 2 — Locate your Class Member ID from the Comcast breach notification you received around December 2023. If you don’t have it, use the ID Look Up tool on the settlement site or call (833) 319-2401

Step 3 — Choose your benefit option: flat $50 cash, documented losses, lost time, or all that apply

Step 4 — If claiming documented out-of-pocket losses, upload supporting documents — bank statements, credit card statements, receipts, invoices, or police reports

Step 5 — If claiming lost time, write a brief description of exactly what you did and how long it took — the form walks you through it

Step 6 — Submit online and save your confirmation. Or mail your completed paper form to: Hasson v. Comcast Cable Communications LLC, c/o Kroll Settlement Administration LLC, P.O. Box 5324, New York, NY 10150-5324 — postmarked by September 14, 2026

Estimated time to complete: 5–10 minutes.

Comcast Data Breach Settlement Key Dates

Milestone	Date
Breach Occurred	October 16–19, 2023
Comcast Discovers Intrusion	October 25, 2023
Comcast Publicly Discloses Breach	December 18, 2023
First Lawsuit Filed	December 2023
Preliminary Approval Granted	January 16, 2026
Opt-Out / Objection Deadline	July 1, 2026
Final Approval Hearing	August 5, 2026 — Philadelphia, PA
Claim Filing Deadline	September 14, 2026
Expected Payment Date	TBD — after final approval and any appeals are resolved

Frequently Asked Questions

Is the Comcast data breach settlement legitimate? 

Yes. This settlement website is authorized by the Court, supervised by counsel for the parties, and controlled by Kroll Settlement Administration LLC, the court-approved administrator. The only official claim site is ComcastBreachSettlement.com. Do not submit your information anywhere else.

Do I need a lawyer to file a Comcast breach claim? 

No. Filing online at ComcastBreachSettlement.com is free and takes about five to ten minutes. You do not need a class action lawsuit attorney to claim the flat $50 or lost time reimbursement. If you suffered major identity theft losses and want to pursue a claim above $10,000 through individual arbitration, consulting a data breach compensation attorney makes sense — but do it before the July 1, 2026 opt-out deadline.

What if I can’t find my Class Member ID? 

You can use the ID Look Up Form on ComcastBreachSettlement.com to check whether Comcast’s records identify you as a class member, or call the settlement administrator at (833) 319-2401. Former customers are eligible too — having an active account is not required.

How much will I actually receive from the Comcast settlement?

 The flat cash payment is estimated at approximately $50, but to the extent total valid claims are greater than or less than the net settlement fund, all valid claims will be adjusted upward or downward on a proportional basis. If fewer people file, you could receive more than $50. If you have documented losses, you can claim up to $10,000 regardless of how many people file.

When will I get my Comcast settlement payment?

 If the settlement is approved and no appeals are filed, payments will be distributed as soon as possible after the August 5, 2026 hearing. Appeals could delay the timeline. Check ComcastBreachSettlement.com for updates after the hearing.

What happens if I do nothing? 

Customers who do nothing will remain part of the settlement class, give up their right to sue over the breach, and will not receive a cash payment — but will still be able to enroll in the identity protection services once the settlement is finalized.

Will this settlement payment affect my taxes? 

Settlement payments for out-of-pocket loss reimbursements are generally not treated as taxable income. The flat cash payment may be treated differently. Consult a tax professional if you receive a significant payout or need specific guidance for your situation.

Can I still sue Comcast individually instead of joining this settlement?

 If you want to keep your right to separately sue Comcast about the legal issues in this case, you must take steps to exclude yourself from the settlement class — this is called opting out. The opt-out deadline is July 1, 2026. Missing that deadline means you are bound by the settlement and cannot sue separately.

Sources & References

• Official Settlement Website (court-authorized): ComcastBreachSettlement.com
• Court Docket: Hasson v. Comcast Cable Communications LLC, No. 2:23-cv-05039-JMY, U.S. District Court, Eastern District of Pennsylvania

Prepared by the AllAboutLawyer.com Editorial Team and reviewed for factual accuracy against the official court-authorized settlement website ComcastBreachSettlement.com and court docket No. 2:23-cv-05039-JMY as of May 16, 2026. Last Updated: May 16, 2026

Disclaimer: This article is for informational purposes only and does not constitute legal advice. Legal claims and outcomes depend on specific facts and applicable law. For advice regarding a particular situation, consult a qualified attorney.