Comcast Xfinity Data Breach Class Action Settlement

What is the Comcast data breach settlement about?

The Comcast Xfinity data breach class action — Hasson v. Comcast Cable Communications, LLC — arises from a cybersecurity incident that occurred between October 16 and 19, 2023. Comcast publicly disclosed the breach on December 18, 2023, revealing that unauthorized actors had exploited a vulnerability in Citrix software to access the internal systems of Xfinity, Comcast's cable and internet subsidiary. Approximately 35 to 36 million Xfinity customers had their personal information exposed, including usernames, hashed passwords, names, contact information, and in some cases partial Social Security numbers and account security questions and answers.

The lawsuit alleged Comcast failed to implement adequate cybersecurity safeguards and delayed notifying affected customers. Comcast denied wrongdoing but agreed to a $117.5 million non-reversionary settlement fund — one of the largest data breach settlements in recent years. Eligible class members who received a breach notification from Comcast around December 18, 2023 can file for a $50 alternative cash payment (no proof required), reimbursement of documented out-of-pocket losses up to $10,000, or compensation for lost time up to $150 at $25 per hour. All class members also receive three years of complimentary identity protection services through Experian IdentityWorks.

A final approval hearing is scheduled for August 5, 2026, at the James A. Byrne U.S. Courthouse in Philadelphia. The claim filing window remains open through September 14, 2026.

Who qualifies to file a claim?

• You reside in the United States or its territories.
• You received an individual data breach notification from Comcast (Xfinity) around December 18, 2023, or were otherwise notified that your information was exposed in the October 2023 Xfinity data breach.
• For the $50 alternative cash payment: no additional proof is required.
• For reimbursement of documented losses (up to $10,000): you must provide supporting documentation such as receipts, bank statements, credit card bills, or professional service invoices tied to the breach.
• For lost time compensation (up to $150 at $25/hour): you must describe the time spent and provide a reasonable estimate supported by a brief declaration.

How to file a claim

1. 1Visit the official settlement website at ComcastBreachSettlement.com.
2. 2Locate your Class Member ID from the Comcast breach notification you received in December 2023 — this ID is required to access the claim form.
3. 3If you misplaced your notice, click 'Need Help Logging In?' on the claim site and follow the prompts to recover your Class Member ID.
4. 4Choose your preferred benefit: (a) $50 alternative cash payment (no proof required), (b) reimbursement for documented out-of-pocket losses up to $10,000 with supporting receipts or statements, or (c) up to $150 for documented time spent addressing the breach.
5. 5Select your payment method and complete the online claim form at ComcastBreachSettlement.com.
6. 6Submit your claim before September 14, 2026, and save your confirmation number.

Is the Comcast settlement legit?

Yes. The Comcast data breach settlement is a court-supervised class action overseen by the U.S. District Court, Eastern District of Pennsylvania (2:23-cv-05039-JMY) and administered by an official settlement administrator. You file your claim directly with the administrator and keep 100% of any payment — Payout never takes a cut. The fastest way to avoid missing this and other settlements you qualify for is to let Payout match and file for you in minutes.