By Patricia Jones The Comcast breach settlement is a proposed $117.5 million class action agreement involving the October 2023 Xfinity data breach. Eligible customers may claim reimbursement of up to $10,000, compensation for lost time or an estimated alternative cash payment of up to $50. The claim deadline is September 14, 2026.
What Is the Comcast Breach Lawsuit About?
The case is titled Hasson v. Comcast Cable Communications, LLC, Case No. 2:23-cv-05039-JMY. It combines multiple lawsuits filed after a criminal cyberattack gained unauthorized access to Xfinity customer information.
The lawsuits alleged that Comcast failed to maintain adequate cybersecurity, failed to protect customers’ personal information and did not provide proper or sufficiently prompt notice of the breach. The plaintiffs also raised claims under the federal Cable Act and several state consumer-protection laws.
Comcast denies the allegations, denies violating any law and has not admitted liability. The parties agreed to the settlement to avoid the expense, delay and uncertainty of continuing the litigation through trial and possible appeals.
What Happened in the Xfinity Data Breach?
Citrix, one of Xfinity’s software providers, announced a vulnerability in one of its products on October 10, 2023. According to Xfinity’s notification, unauthorized access occurred within some of its systems between October 16 and October 19, 2023, before the vulnerability had been fully mitigated.
Xfinity determined on November 16, 2023, that customer information was likely acquired. It publicly disclosed the incident and sent affected customers notification around December 18, 2023.
Information involved in the incident included usernames and hashed passwords. For some customers, the exposed information may also have included:
- Names
- Contact information
- Dates of birth
- The last four digits of Social Security numbers
- Security questions and answers
The type of information involved was not identical for every customer.
Who Qualifies for the Comcast Settlement?
You are generally included if you live in the United States or one of its territories and Comcast sent you an individual notice stating that your personal information may have been affected by the October 2023 breach.
The settlement documents estimate that the class contains approximately 31,658,000 people. Being a current or former Comcast customer is not enough by itself. Eligibility depends on whether Comcast identified you as affected and sent you an individual breach notification.
People who received an email or mailed settlement notice should look for a Class Member ID. Anyone who cannot locate the ID may use the official settlement administrator’s lookup procedure or call 833-319-2401, Monday through Friday from 8:00 a.m. to 8:00 p.m. Eastern Time.
How Much Can Eligible Customers Receive?
The settlement offers three main types of benefits. A claimant may request reimbursement for documented losses and lost time or select the alternative cash payment. The final amount can be adjusted depending on the number and value of valid claims.
1. Reimbursement for Out-of-Pocket Losses
Eligible customers may claim reimbursement for actual, unreimbursed expenses reasonably connected to the breach. The combined maximum for out-of-pocket losses and lost time is $10,000 per class member.
Qualifying expenses may include:
- Financial losses resulting from identity theft or fraud
- Costs connected with falsified tax returns
- Credit-monitoring expenses
- Credit-report expenses
- Costs of placing or removing a credit freeze
- Postage, copying, telephone or notary expenses
- Other reasonable expenses incurred while responding to the breach
The expenses generally must have been incurred on or after October 16, 2023, and must not have already been reimbursed by another source.
Claimants must provide reasonable supporting documentation, such as bank statements, credit-card records, receipts, invoices or telephone records. A handwritten or self-created document alone is generally insufficient, although it may help explain other evidence.
2. Payment for Lost Time
Class members may claim up to five hours of lost time at $30 per hour, providing a possible maximum of $150 for this part of the claim.
Lost time may include time spent:
- Investigating suspicious transactions
- Dealing with identity theft or fraud
- Changing passwords
- Reviewing credit reports
- Placing fraud alerts or credit freezes
- Taking other preventive measures following the breach
A claimant must provide a self-certified explanation describing what was done and how much time was spent. Time can be reported in 15-minute increments.
3. Alternative Cash Payment
Customers who do not claim out-of-pocket losses and lost time may request an alternative cash payment estimated at up to $50.
The alternative payment does not require proof of a specific financial loss. However, the claimant must still be a genuine settlement class member and submit an accurate claim using their Class Member ID.
The $50 amount is only an estimate. It may be reduced or increased proportionally depending on the money remaining in the net settlement fund and the number of approved claims. Therefore, the settlement does not guarantee that every claimant will receive exactly $50.
Is This a No-Proof Settlement?
The alternative cash payment is essentially a no-documented-loss option. Eligible customers do not need receipts showing identity-theft expenses to request it. They must still truthfully confirm their eligibility and complete the official claim form.
A lost-time claim also relies mainly on the claimant’s certification and explanation. However, a request for reimbursement of actual out-of-pocket losses requires supporting records.
Filing a claim without being an affected customer, submitting duplicate claims or inventing losses may cause the claim to be rejected and could create legal consequences.
Free Identity-Protection Services
Settlement class members are also eligible for three years of CyEx Financial Shield Complete identity-defense and restoration services. This benefit includes one-bureau credit monitoring, dark-web monitoring, transaction alerts, monthly credit scores, security-freeze assistance and up to $1 million in identity-theft insurance.
A cash claim is not required to qualify for these services. Class members should use the individualized enrollment code supplied in the settlement email or letter. Full activation will occur after the settlement becomes final.
How to File a Comcast Settlement Claim
Claims may be filed electronically through the official court-authorized Comcast breach settlement website or submitted using the paper claim form. Online claims must be submitted by 11:59 p.m. Eastern Time on September 14, 2026. Mailed claims must be postmarked by the same date.
A mailed form should be sent to:
- Hasson v. Comcast Cable Communications LLC
- c/o Kroll Settlement Administration LLC
- P.O. Box 5324
- New York, NY 10150-5324
The official settlement administrator’s telephone number is 833-319-2401.
The opt-out and objection deadlines were July 1, 2026, and have already passed. Customers who remain in the class will release the covered claims against Comcast if the settlement becomes final, even when they do not submit a cash claim.
When Will Settlement Payments Be Sent?
No exact payment date has been announced. Payments cannot be distributed until the settlement becomes effective and any appeals or other challenges are resolved.
The $117.5 million fund must also cover identity-protection services, claim administration, court-approved legal expenses and other approved costs. Class lawyers have requested fees of up to approximately $39.17 million, but the court determines what amount will be approved.
Therefore, the Comcast breach settlement is currently accepting claims through September 14, 2026, but it remains a proposed agreement until the court grants final approval. Eligible affected customers may request documented losses and lost time up to a combined $10,000 or choose an estimated alternative payment of up to $50.