Xfinity Customers Still Have Time to Claim Part of Comcast’s $117.5M Data Breach Settlement
A cyber attack exposed the personal information of nearly 36 million Xfinity customers in October 2023. Now, Comcast has settled a class action lawsuit related to the hack, agreeing to pay $117.5 million to people affected by the breach. Compensation is open to claims, and if you’re a current or former customer who received a breach notice from Comcast in December 2023, you may be eligible for a cash payment of up to $50, or up to $10,000 if you can document the losses associated with the breach.
The application deadline was originally on Aug. 14, but has been extended until Sept. 14, 2026. Payment class members who neglect to file a claim or dispute payment by the new September date will forfeit their right to take independent legal action against Comcast regarding this cyber security incident.
When Comcast notified users of the breach (PDF) in December 2023, the company acknowledged that data thieves stole usernames, passwords, names, contact information, dates of birth and the last four digits of Social Security numbers.
In a class action lawsuit, Hasson v. Comcast Cable Communications LLC (PDF), customers allege that Comcast is liable for monetary damages and time spent pursuing copyright protections related to the infringement. While Comcast denied any wrongdoing, it reached an initial settlement in January 2026, agreeing to pay $117.5 million to 36 million affected customers.
The official payment website is now live, although payments won’t start until after the final court approval hearing. That hearing is currently scheduled for Aug. 5.
If you are eligible for a compensation payment, you can file on the website now. You need the unique member ID number included in the first online communication sent to affected Comcast customers to file a claim.
Read more: Google’s $135M Data Payments Platform is live. See that You are worthy
You have several options if you do not want to file a claim. If you disagree with the agreed settlement, you can write to the court or ask for permission to speak at the final consent hearing.
You can also opt out of the agreement, which will allow you to retain your right to separately sue Comcast regarding this data breach. If you do not file a claim by Sept. 14 or you opt out of payment by 1 July, you will lose the payment of this compensation and lose the right to pursue further legal action. If you fill out a physical application form, it will remain valid as long as it is marked with the application deadline.
As part of the settlement, Comcast must pay for and provide identity protection services to any affected class member. Unlike settlement payments, affected customers who do not file a claim will also be able to apply for identity protection services. Anyone who opts out of the poem will not be eligible for those services.
Representatives for Comcast and the law firm Lynch Carpenter LLP, which served as lead counsel for the plaintiffs, did not immediately respond to a request for comment.
Who can be a part of the Comcast settlement?
Not all Comcast customers are automatically eligible to claim part of the compensation payout — the money is reserved for people whose personal information was accessed during the 2023 data breach.
To join, you must meet these three qualifications:
- Be a resident of the US or its territories.
- Comcast services were used during the October 2023 data breach.
- You received notification of a Comcast data breach.
Although the court is scheduled to hold a final approval meeting on Aug. 5, those concerned can file a claim on the official settlement website until September 14. The time and date of the approval meeting has changed once, and may be changed again. Any updates will be posted on the website.
While some class-action lawsuit settlements pay a lump sum to affected customers who do not file a claim, that is not the case in Hasson v. Comcast Cable Communications LLC. You must file a claim and provide a payment method before the deadline to receive compensation as part of the payment.
How much will the Comcast settlement pay?
The amount of money that each claimant will receive will be equal to the out-of-pocket loss or lost time that you can prove you incurred as a result of the data breach.
The total payout for each claimant is up to $10,000 and is affected by the total settlement amount and the number of affected customers filing a claim.
If you don’t want to go through the process of verifying that out-of-pocket losses or lost time are connected to a data breach, you can choose to accept an additional $50 cash payment. Another cash payment may vary depending on the total number of claimants.
A third of the settlement ($39.2 million) is earmarked to cover attorneys’ fees, subject to court approval. After this amount has been paid, the remaining amount of compensation will be divided among the compensation members who submitted the application form before the deadline.
Whether you’re seeking reimbursement for out-of-pocket losses, lost time or receive an alternative cash payment, you must submit by September 14. Payments will be distributed after the final approval hearing, assuming no appeals.
