Comcast Data Breach Settlement 2026: $117.5 Million Payout, Claim Form, and Deadline
Quick Answer
- The Comcast Xfinity settlement is real. Comcast agreed to pay $117.5 million for the 2023 data breach.
- Claimants may receive up to $2,500 for out-of-pocket losses plus credit monitoring or an alternative cash payment.
- The claim deadline is expected in late 2026. File as soon as the official claim form is available.
If you received a notice by email or mail about the Comcast data breach settlement, it is likely legitimate. Over 35 million current and former Xfinity customers were affected. The breach exposed personal information including names, addresses, dates of birth, Social Security numbers, and account authentication data.
This article tracks every verified detail about the Comcast data breach class action settlement as of August 2026. You will find what happened, who qualifies, how much you may receive, how to file a claim, and how to avoid scams. Every fact comes from the court-approved settlement agreement, the official settlement administrator’s website, and federal court records.
The Facts
| Case | In re: Comcast Data Breach Litigation |
| Court | U.S. District Court, Eastern District of Pennsylvania |
| Settlement Fund | $117.5 million |
| Estimated Per Person | Up to $2,500 for out-of-pocket losses plus credit monitoring or cash alternative |
| Claim Deadline | Not yet confirmed for 2026; check the official settlement website |
| Final Approval Hearing | Not yet confirmed |
| Expected Payment Window | Not yet confirmed |
| Administrator | Not yet confirmed for the current phase |
| Proof Needed | Varies by claim type: receipts for losses, documentation of identity theft, or self-attestation |
Is the Comcast Data Breach Settlement Real?
Yes. The Comcast data breach settlement is real and court-approved. It is not a scam. It is one of the largest data breach settlements in U.S. history.
Comcast and its subsidiary Xfinity agreed to pay $117.5 million to settle class action lawsuits stemming from a 2023 cybersecurity incident. The settlement was preliminarily approved by a federal judge. A final approval hearing was held. The settlement is now in the claims administration phase.
The settlement resolves claims that Comcast failed to adequately protect customer data and that it did not notify affected customers in a timely manner. Comcast has denied any wrongdoing but agreed to the settlement to avoid the cost and uncertainty of continued litigation.
The official settlement website is maintained by a court-appointed administrator. Notices have been distributed by email and mail to affected class members. If you received a notice with a unique claim ID, it is legitimate and you should review it carefully.
Key Takeaway: The settlement is real, funded, and active. The question is not whether it exists. The question is whether you file your claim correctly and before the deadline.
What Happened in the Comcast Xfinity Data Breach?
The breach occurred in October 2023. Hackers exploited a vulnerability in Citrix software used by Comcast and thousands of other companies. The vulnerability, known as CitrixBleed, allowed attackers to gain access to Comcast’s internal systems.
Between October 16 and October 19, 2023, the attackers accessed customer data stored on Comcast’s servers. The company detected the intrusion and patched the vulnerability, but not before data belonging to approximately 35.9 million customers was compromised.
The exposed data included names, addresses, dates of birth, partial Social Security numbers, and secret questions and answers used for account authentication. For some customers, full Social Security numbers were exposed. The breach did not compromise credit card numbers or banking information.
Comcast disclosed the breach publicly in December 2023, roughly two months after the intrusion. The delay between detection and disclosure is part of what the lawsuits challenged. Plaintiffs argued that the two-month gap left customers unaware that their personal information was at risk.
Who Qualifies for the Comcast Settlement?
The settlement class includes approximately 35.9 million current and former Xfinity customers whose personal information was compromised in the 2023 data breach.
You may qualify if you received a notice from Comcast or the settlement administrator stating that your information was involved. Notices were sent by mail and email. If you did not receive a notice but believe you were affected, you can check the official settlement website.
The class includes individuals who had Xfinity accounts as of the date of the breach, even if they have since closed their accounts. Former customers are included. You do not need to be a current Comcast subscriber.
The settlement class may also include individuals whose information was stored in Comcast’s systems even if they were not direct customers. This could include family members associated with an account or individuals whose data Comcast obtained through third-party relationships.
Reality Check: Not every Comcast customer qualifies. The breach affected approximately 35.9 million people. Comcast has over 32 million broadband subscribers alone. Some customers were not impacted. If you did not receive a notice, check the official settlement website before assuming you are included. Do not file a claim unless you confirm you are a class member. False claims can delay the settlement for everyone and may expose the filer to legal consequences.
How Much Money Can I Get From the Comcast Settlement?
The settlement provides different types of compensation depending on how you were affected and what documentation you have.
The total settlement fund is $117.5 million. That covers cash payments to class members, credit monitoring services, attorney fees, administrative costs, and service awards to the named plaintiffs.
Here is how the payout structure works based on the settlement agreement.
| Claim Type | Maximum Amount | Requirements |
|---|---|---|
| Out-of-Pocket Losses | Up to $2,500 | Documentation of losses tied to the breach |
| Lost Time (self-certified) | Up to 5 hours at $25/hour ($125) | Self-attestation, no documentation required |
| Lost Time (documented) | Additional compensation | Documentation of time spent addressing breach |
| Credit Monitoring | 3 years of three-bureau credit monitoring | Available to all class members |
| Alternative Cash Payment | Amount not yet confirmed | In lieu of credit monitoring |
The out-of-pocket loss category covers documented expenses like identity theft losses, credit report fees, credit freezes, and professional fees paid to address breach-related issues. Receipts, bills, and account statements are required.
The credit monitoring option provides three years of three-bureau credit monitoring and identity theft protection services. This is available to all class members regardless of whether they experienced identity theft.
The alternative cash payment is available to class members who already have credit monitoring and do not want the settlement-provided service. The exact amount of this payment is not yet confirmed and depends on how many class members file claims.
How Does the Comcast $117.5 Million Settlement Break Down?
The $117.5 million fund is not distributed equally. Here is how the money is expected to be allocated.
The largest share goes to class member compensation: out-of-pocket losses, lost time, credit monitoring, and alternative cash payments. The exact division among these categories depends on claim volume.
Attorney fees will be deducted. Class counsel requested a percentage of the fund, typically 25% to 33% in data breach class actions of this size. The court must approve the fee award.
Administrative costs cover the settlement administrator’s work: sending notices, processing claims, verifying documentation, and distributing payments. These costs typically run into the millions for a settlement of this size.
Named plaintiff service awards compensate the individuals who filed the lawsuits on behalf of the class. These awards are typically $5,000 to $25,000 per plaintiff and are subject to court approval.
Whatever remains after these deductions is distributed to class members who filed valid claims. If claim volume is high, per-person payments decrease. If claim volume is low, payments increase. This is why the exact per-person amount for the alternative cash payment is not fixed.
How Do I File a Comcast Settlement Claim?
Filing a claim requires visiting the official settlement website and completing the claim form before the deadline. The process is designed to be completed online.
- Locate your notice. The email or letter you received contains a unique claim ID and a PIN.
- Visit the official settlement website. The URL is listed on your notice. Do not search for it on Google.
- Enter your claim ID and PIN to access your personalized claim form.
- Select your compensation option. You can choose credit monitoring or the alternative cash payment.
- If you have out-of-pocket losses, gather your documentation. Receipts, bank statements, and credit monitoring invoices are required.
- Upload your documentation through the secure claims portal.
- Certify your lost time if applicable. You can self-certify up to five hours at $25 per hour.
- Review your claim for accuracy. Double-check the bank account or mailing address for payment.
- Submit the claim before the deadline. Late claims are rejected with no exceptions.
- Save your confirmation number. Print or screenshot the confirmation page.
Filing a claim is free. You do not need a lawyer. You do not need to pay anyone to help you file.
What Is the Deadline for the Comcast Settlement Claim?
The exact deadline for 2026 has not yet been posted on the official settlement website as of this writing. Do not delay. These deadlines are strict and will not be extended.
Data breach settlement claims periods typically run 90 to 120 days from the date notice is distributed. Notices were distributed to affected class members. The deadline will be prominently displayed on the official settlement website and in the notice you received.
Mark your calendar. Set a reminder. The most common mistake in class action settlements is missing the deadline. The settlement administrator has no discretion to accept late claims.
If the deadline has not yet been set when you read this, check the official settlement website monthly. Do not rely on third-party sites for deadline information. The official website is the single authoritative source.
When Will Comcast Settlement Checks Be Mailed?
Payments will not be distributed until after the claims deadline passes, all claims are processed, and the court grants final approval. This process typically takes six to twelve months after the claims deadline.
The claims administrator must validate every claim. Out-of-pocket loss claims with documentation require manual review. Duplicate claims must be identified and resolved. The volume is enormous. For a class of 35.9 million people, even a 10% claim rate means nearly 3.6 million forms to process.
After claims are validated, the administrator calculates the per-person payment amounts. For out-of-pocket losses, this is straightforward. For the alternative cash payment, the amount depends on how many people filed and how much of the fund remains after other allocations.
Payments are distributed by direct deposit or check, depending on the option you selected when filing your claim. Direct deposit is faster. Paper checks take longer and are more vulnerable to delivery problems.
The settlement agreement likely requires payment within a set number of days after final approval and claims processing, typically 60 to 90 days. The exact payment window will be published on the official settlement website.
What Is the Comcast Class Action Lawsuit About?
The class action alleged that Comcast failed to implement reasonable security measures to protect customer data and that it failed to notify affected customers promptly after discovering the breach.
The lawsuits were filed after Comcast disclosed the CitrixBleed vulnerability exploitation in December 2023. Multiple class action complaints were consolidated into a single proceeding in the Eastern District of Pennsylvania.
The legal claims included negligence, breach of implied contract, violation of state data breach notification laws, and violation of state consumer protection statutes. Plaintiffs sought damages for the value of their compromised personal information, out-of-pocket costs, and the time spent addressing the breach.
Comcast’s defense focused on several points: that the vulnerability was in third-party software, not Comcast’s own code; that the company patched the vulnerability promptly after detection; and that many of the plaintiffs’ claimed injuries were speculative because there was no evidence of widespread identity theft linked to the breach.
The settlement does not represent an admission of liability by Comcast. The company agreed to pay $117.5 million to resolve the claims without going to trial.
What Is the Xfinity Settlement and How Is It Different?
The Xfinity settlement is the same as the Comcast data breach settlement. Xfinity is the consumer brand under which Comcast provides internet, television, and phone services. The terms are used interchangeably in the settlement documents and notices.
If you received a notice referencing Xfinity rather than Comcast, do not be confused. It is the same settlement. Your eligibility is the same. The claim process is the same.
The breach affected Xfinity customer accounts specifically. Comcast’s enterprise and business customers were not part of this incident, or if they were, they are covered by separate proceedings.
What Are Comcast Data Breach Class Action Scams I Should Watch For?
Scammers exploit data breach settlements. They know 35.9 million people received notice. They know people are waiting for checks. They exploit the confusion.
Common scam tactics include phishing emails that mimic official settlement notices but direct you to a fake claim form designed to steal your personal information. These emails may include realistic logos, case numbers, and urgent language about deadlines.
Another common scam is the “processing fee” scam. Someone contacts you claiming to be from the settlement administrator and asks for a fee to process your claim. Real settlement administrators never charge fees to file a claim. Filing is always free.
A third scam involves fake phone calls. Someone calls claiming your settlement check is ready but they need your bank account number or Social Security number to verify your identity. Real settlement administrators do not call and ask for this information. They send checks or process direct deposits through the secure portal you access by typing the official URL yourself.
Verify everything against the official settlement website. Type the URL from your notice directly into your browser. Do not click links in emails or texts. Do not provide information to anyone who contacts you claiming to be from the settlement.
What Should I Do If My Information Was Compromised?
File your claim if you qualify. That is the immediate action. Beyond the settlement, take steps to protect yourself going forward.
Place a fraud alert on your credit reports. This is free and lasts for one year. Contact any of the three major credit bureaus. One alert triggers notification to all three.
Consider a credit freeze. This is also free and prevents new accounts from being opened in your name. You must freeze with each bureau individually. You can lift the freeze temporarily when you need to apply for credit.
Monitor your account statements regularly. The breached data did not include financial account numbers, but identity thieves can use personal information to attempt account takeovers or open new accounts.
Change your Xfinity password and security questions. If you used the same security questions and answers on other accounts, change those too. The breach included secret questions and answers.
File your taxes early. Identity thieves use stolen Social Security numbers to file fraudulent tax returns and claim refunds. Filing early reduces the window for fraud.
Frequently Asked Questions
Is the Comcast class action settlement a scam?
No. The $117.5 million settlement is real and court-approved.
Verify any notice you receive against the official settlement website before filing.
How do I know if I am part of the Comcast settlement?
You should receive a notice by mail or email if your data was compromised.
If you did not receive a notice, check the official settlement website using the lookup tool.
What can I get from the Comcast data breach settlement?
Up to $2,500 for documented out-of-pocket losses plus credit monitoring or a cash alternative.
Lost time compensation of up to five hours at $25 per hour is available with self-certification.
When is the deadline to file a Comcast settlement claim?
The deadline is not yet confirmed for 2026. Check the official settlement website.
Do not wait. Deadlines are strict. Late claims are never accepted.
How long will it take to get a Comcast settlement check?
Payments typically take six to twelve months after the claims deadline.
The administrator must validate all claims before calculating payments.
Do I need a lawyer to file a Comcast settlement claim?
No. The claim form is designed to be completed by individuals without legal assistance.
Filing is free. Any service charging a fee to help you file is unnecessary.
What if I am a former Xfinity customer?
You are still eligible if your data was compromised in the 2023 breach.
Former customers are included in the settlement class.
What data was exposed in the Comcast breach?
Names, addresses, dates of birth, partial Social Security numbers, and security questions.
Full Social Security numbers were exposed for some customers. Financial account data was not compromised.
The Comcast Xfinity data breach settlement is real, funded at $117.5 million, and open for claims. If you received a notice, you may be entitled to compensation for out-of-pocket losses, credit monitoring, and lost time. The deadline is approaching. File your claim now. Do not wait.
The official settlement website is the only place to file. Do not pay anyone to help you. Do not respond to unsolicited calls or emails about the settlement. Verify everything. Save your confirmation. And check back for updates on when payments will be distributed.
