A $117.5 million settlement from a 2023 data breach is open for claims, with an August deadline.
In October 2023, a cybersecurity incident exposed the personal information of millions of Xfinity customers. The data involved included usernames, passwords, contact details, dates of birth, and the last four digits of Social Security numbers. Comcast notified affected customers in December 2023.
That breach led to a class-action lawsuit alleging that Comcast failed to properly protect customer data and maintained inadequate security systems. Comcast denied wrongdoing but agreed to pay $117.5 million to settle the case. The claims process is now open, and eligible customers have until September 14th to file.
Who qualifies
The settlement covers current and former Xfinity customers whose personal information was accessed during the October 2023 breach. The defining criteria is straightforward: if Comcast sent you a breach notification in December 2023, you are part of the settlement class and may be eligible to file a claim.
Not every Comcast customer qualifies automatically. Eligibility is tied specifically to the breach notification, so customers who did not receive that communication in December 2023 are not included in the settlement class regardless of their account status at the time.
How much you can receive
The settlement offers two paths for compensation, and the amount you receive depends on which option you choose and how many total claims are filed.
The first option allows eligible customers to submit claims for reimbursement of documented out-of-pocket expenses or lost time directly connected to the breach. This path carries a maximum payout of up to $10,000 per person. The actual amount depends on the total number of valid claims submitted and the overall settlement pool available after legal fees and administrative costs. Claims for out-of-pocket losses must be filed by Monday, September 14,
The second option is simpler. Customers who do not want to document specific losses can opt for an alternative cash payment of $50. This figure is also subject to change based on total claim volume, meaning the more people who file, the smaller each individual alternative payment could become. The September 14, deadline applies to this option as well.
When to expect payment
A final approval hearing is scheduled for August 5th. Payments are expected to be distributed after that date, assuming the court approves the settlement terms. The timeline between final approval and actual disbursement can vary depending on administrative processing and any potential legal challenges, though none have been publicly signaled.
Customers who want to file a claim can do so through the official settlement website at comcastbreachsettlement.com. The site lists eligibility requirements, claim instructions, and documentation guidance for those pursuing the higher reimbursement tier.
Why this matters beyond the dollar amount
Data breach settlements of this size are becoming a more common feature of the consumer landscape, but the participation rates on claims tend to be low. Many eligible customers either do not hear about the settlement, assume the process is too complicated, or conclude that the alternative payment is not worth the effort.
The $50 flat payment requires minimal documentation and takes only a few minutes to file. The $10,000 maximum requires more work but exists for customers who can demonstrate real financial harm from the breach, such as costs associated with credit monitoring, identity theft remediation, or time spent dealing with fraudulent activity on their accounts.
The September 14th deadline applies regardless of which path a customer chooses. Customers who miss it forfeit their right to compensation from the settlement while still being bound by its terms, meaning they cannot pursue separate legal action against Comcast over the same breach.