Comcast Data Breach Lawsuit Settlement: Who’s Eligible and How to Claim
Comcast’s $117.5 million data breach settlement has moved past the claims stage and into final approval — which means the questions people are searching now are different from the ones being asked back in the spring. If you got a notice in December 2023 about a security incident at Comcast, here’s exactly where things stand, what you were eligible for, and what to expect next.
What Is the Comcast $117.5 Million Settlement?
The Comcast data breach lawsuit settlement resolves federal class-action claims tied to a cybersecurity incident that hit Comcast’s systems in October 2023. The proposed settlement required Comcast to establish a $117,500,000 fund to cover cash payments to settlement class members, reimbursement for documented out-of-pocket losses and lost time, identity defense and restoration services, plus administrative costs, attorneys’ fees, and service awards.
The agreement, one of the largest data breach settlements on record, involves a class of roughly 31.7 million potential members and was described by U.S. District Judge John Younge of the Eastern District of Pennsylvania as one of the more legally complex data breach cases to date. On August 20, 2026, Judge John Milton Younge granted final approval to the settlement on behalf of current and former Comcast customers whose personal information was compromised.
The case is formally known as Hasson v. Comcast Cable Communications LLC, Case No. 2:23-cv-05039-JMY, filed in the U.S. District Court for the Eastern District of Pennsylvania.
What Caused the Comcast Customer Data Breach?
The breach occurred between October 16 and October 19, 2023, when cybercriminals exploited the “Citrix Bleed” vulnerability in a Citrix NetScaler appliance that Comcast used to manage remote access for customers and contractors. Comcast publicly disclosed the incident in December 2023, notifying affected customers by mail and email that their information may have been exposed.
Plaintiffs alleged that Comcast failed to protect customer data, maintained inadequate security measures, was unjustly enriched by using personal data, violated the federal Cable Act, and violated certain state consumer protection statutes. Comcast has denied any wrongdoing but agreed to settle rather than continue prolonged litigation.
Notably, the case’s complexity partly stemmed from claims brought under the federal Cable Act — a statute class counsel said had never before been applied to a data breach involving a cable operator. That’s a meaningful legal precedent that will likely shape how future telecom breach lawsuits are framed.
What Information Was Affected?
Comcast’s breach notification and later settlement filings described a range of exposed data, though not every customer was affected the same way. Categories of information involved included:
- Usernames and passwords (in hashed form)
- Names and contact information
- Dates of birth
- Last four digits of Social Security numbers, for some customers
- Security questions and answers
Because the exposure varied by individual, not everyone who received a notice had the same level of personal information compromised — which is part of why the settlement offers both a flat cash option and a documented-loss claim path.
Who Is Eligible for a Comcast Settlement Payment?
You’re eligible if Comcast sent you an individual notice — typically dated around December 18, 2023 — stating that your personal information may have been exposed in the October 2023 data breach. You do not need to still be a Comcast or Xfinity customer today; former customers who received a notice also qualify.
If you’re unsure whether you received a notification or you misplaced the letter, the official settlement site includes a lookup tool tied to a unique settlement member ID.
How Much Are the Comcast Settlement Payments?
Eligible class members generally had three ways to receive compensation, summarized below:
| Payment Type | Amount | Requirements |
|---|---|---|
| Alternative cash payment | Estimated ~$50 (final amount depends on total claims filed) | No documentation needed |
| Out-of-pocket losses | Up to $10,000 | Receipts, statements, or other proof the loss is tied to the breach |
| Lost time | Up to 5 hours at $30/hour (max $150) | Description of time spent addressing breach-related issues |
| Identity protection services | 3 years of monitoring, plus $1 million identity theft insurance | Automatic for notified class members — no claim form required |
The court approved attorneys’ fees and expenses of $31.7 million, or 27% of the settlement fund, which comes out of the $117.5 million before the remaining funds are divided among claimants. Because the flat cash payment is pro-rated based on how many people filed valid claims, the final per-person amount for the alternative cash option won’t be confirmed until the administrator finishes processing claims — it could land above or below the original $50 estimate.
The identity protection package doesn’t require a cash claim at all. It includes single-bureau credit monitoring, monthly credit score tracking, dark web and fictitious identity monitoring, real-time authentication alerts, $1 million in identity theft insurance, lost wallet protection, and home title and address change monitoring. Enrollment codes were included in the original breach notification, and class members could pre-enroll ahead of final approval.
How to File a Comcast Settlement Claim
Claims were filed one of two ways:
- Online — through the official settlement portal at ComcastBreachSettlement.com, using the unique member ID from the breach notice.
- By mail — a paper claim form requested through the settlement website, mailed to Kroll Settlement Administration LLC and postmarked by the deadline.
Claimants choosing the documented-loss option needed to upload or mail supporting evidence — bank statements, credit reports, receipts for credit-freeze fees, or records of time spent resolving fraud issues. Those filing for the flat cash payment or the identity protection benefit didn’t need to submit any documentation.
What Is the Deadline to File a Claim?
The original claims deadline was extended once, from August 14 to September 14, 2026. That September 14, 2026 deadline has now passed. If you didn’t file a claim by that date, you’re generally no longer eligible for a cash payment — though class members who didn’t opt out remain bound by the settlement’s release of claims, meaning you gave up the right to sue Comcast separately over this breach even if you didn’t submit a claim form.
If you’re checking now, in late September 2026, and you’re not sure whether you filed, the fastest way to confirm is to contact the settlement administrator directly rather than waiting on an email confirmation that may have gone to spam.
When Will Comcast Settlement Payments Be Issued?
The settlement administrator issues payments to approved claimants after completing claim processing and after the court grants final approval of the settlement. With final approval granted on August 20, 2026, the administrator — Kroll Settlement Administration LLC — now moves into the verification and distribution phase.
There’s no single published payout date yet, and that’s normal for a settlement of this size. Administrators typically need to:
- Verify tens of millions of claims, including documentation for out-of-pocket loss claims
- Calculate the final pro-rated flat cash amount once total valid claims are known
- Wait out any appeal period tied to the final approval order, which can delay distribution if an appeal is filed
- Process payments in batches (direct deposit, check, or prepaid card, depending on how claimants requested payment)
Given the scale of this case, expect payments to be issued in the months following final approval rather than all at once. Checking the official settlement website periodically is the most reliable way to get a firm date, since third-party blogs often repeat outdated timelines.
How Does the Settlement Affect Comcast Customers?
Beyond the direct payments, this case adds to a growing pattern: telecom and cable providers holding enormous troves of customer data are facing real financial consequences when third-party vulnerabilities go unpatched. The Citrix Bleed exploit that hit Comcast also affected other large organizations, underscoring how a single unpatched vendor tool can cascade into a breach affecting tens of millions of unrelated customers.
For current Xfinity subscribers, the practical takeaway is less about the check that may or may not arrive and more about using the free identity monitoring while it’s active. Three years of credit and dark web monitoring, plus $1 million in identity theft insurance, is a real benefit even for customers who never file a cash claim — and it’s worth actually enrolling with the code from the original notice rather than letting it lapse.
Comcast Settlement FAQ
Who qualifies for the Comcast settlement?
Anyone who received an individual notice from Comcast — typically dated around December 18, 2023 — stating their personal information may have been compromised in the October 2023 data breach.
How much money can eligible Comcast customers receive?
Up to $10,000 for documented out-of-pocket losses tied to the breach, up to $150 for lost time (5 hours at $30/hour), or an estimated $50 flat cash payment if no documentation is provided. The final flat-payment amount depends on the total number of valid claims filed.
What is the Comcast settlement claim deadline?
The claim deadline was September 14, 2026, after being extended once from an original August 14, 2026 date. That deadline has now passed.
How do I file a Comcast settlement claim?
Claims were submitted online at ComcastBreachSettlement.com or by mailing a paper claim form, postmarked by the deadline, to the settlement administrator, Kroll Settlement Administration LLC.
When will Comcast settlement checks or payments arrive?
No exact date has been published. Final court approval was granted August 20, 2026, and the administrator is now verifying claims and calculating pro-rated payment amounts; distribution is expected in the following months, pending any appeals.
What caused the Comcast data breach in 2023?
Attackers exploited the “Citrix Bleed” vulnerability in a Citrix NetScaler appliance Comcast used for remote access, gaining unauthorized access to customer data between October 16 and October 19, 2023.
Who is the settlement administrator, and what does Kroll do?
Kroll Settlement Administration LLC manages the Comcast breach settlement — processing claim forms, verifying documentation, calculating payment amounts, and distributing funds to approved class members.
Is there still a Comcast data breach settlement in 2026 I can join?
The claims window for the original $117.5 million settlement closed September 14, 2026. If you didn’t receive a breach notice or missed the deadline, check the official settlement site or consult an attorney about your options, but new claims generally can’t be added after the deadline.
Author Bio: Hamid Ali is a technology and cybersecurity writer covering data breaches, privacy, class-action settlements, and consumer technology. He explains complex cybersecurity incidents and settlement details in clear, practical language for everyday readers.
Author Name: Hamid Ali
Email: johanharwen314@gmail.com
Also Read: