Xfinity Data Breach Settlement 2026: Claim Deadline, $117.5M Fund, and Who Qualifies
Quick Answer
- Comcast agreed to pay $117.5 million to settle claims over a 2023 data breach that exposed data for roughly 36 million Xfinity customers.
- Eligible class members could claim an estimated $50 cash payment or up to $10,000 for documented losses.
- The claim deadline was September 14, 2026, and that date has now passed, so new claims can no longer be submitted.
The Xfinity data breach settlement is real, and it involves a $117.5 million fund that Comcast agreed to pay to resolve claims tied to an October 2023 cyberattack. If you received a breach notification from Comcast around December 2023, you were likely part of the settlement class.
That notification matters more than anything else. The settlement administrator, Kroll, required the unique Class Member ID included in your notice to file a claim. Without it, the online claim form would not work.
Here is what the settlement covers, what was available, and what happens next now that the claim deadline has passed. You will also find the one detail most other articles missed: a federal judge cut the requested attorney fees, which means more of the $117.5 million should flow to actual claimants.
The Facts
| Case | Hasson v. Comcast Cable Communications, LLC |
| Status | Final approval granted August 20, 2026 |
| Fund Size | $117.5 million |
| Est. Per Person | ~$50 (no proof) or up to $10,000 (documented losses) |
| Claim Deadline | September 14, 2026 (passed) |
| Administrator | Kroll Settlement Administration LLC |
| Proof Needed | None for $50 flat payment; documentation for loss claims |
Is the Xfinity data breach settlement legit?
Yes. This is a real class action settlement approved by a federal judge in the U.S. District Court for the Eastern District of Pennsylvania. The case is Hasson v. Comcast Cable Communications, LLC, Case No. 2:23-cv-05039-JMY.
Comcast denied any wrongdoing. The company agreed to the $117.5 million payment to resolve claims that it failed to protect customer data during a breach that occurred between October 16 and October 19, 2023. Hackers accessed usernames, passwords, names, contact information, dates of birth, and the last four digits of Social Security numbers.
The official settlement website was comcastbreachsettlement.com. Any other site asking for your information was not the official administrator.
Key Takeaway: If you received a breach notice from Comcast in December 2023, your data was part of the exposure, and you were automatically included in the settlement class unless you opted out.
How much was the Xfinity data breach settlement per person?
The settlement offered two payment tracks. The first was an Alternative Cash Payment of approximately $50, subject to pro rata adjustment depending on how many valid claims were filed. This option required no receipts or documentation beyond your Class Member ID.
The second track was for documented losses. Class members could claim reimbursement for out-of-pocket expenses tied to the breach, capped at $10,000 per person. Covered expenses included identity theft repair costs, credit monitoring fees, credit freeze charges, and legal fees.
Lost time was also compensable at $30 per hour for up to 5 hours, with a combined cap of $10,000 when added to out-of-pocket losses.
The final per-person amount depended on two variables: how many people filed valid claims, and how much remained in the fund after attorney fees and administrative costs. As of July 15, 2026, just under 1 million claims had been received.
How much can I get from the Comcast data breach payout?
Your actual payout depended on which option you selected and the total number of valid claims. The $50 estimate was not guaranteed. It was a pro rata figure based on the assumption that a certain percentage of the 36 million class members would file.
If you filed for documented losses, the maximum was $10,000, but that ceiling applied only to people with substantial, verifiable expenses. Most claimants with minimal or no documentation received closer to the $50 flat amount.
A federal judge approved the settlement on August 20, 2026, but reduced the requested attorney fees. That reduction is significant. Every dollar cut from attorney fees is a dollar that can flow to class members instead.
Key Takeaway: The $50 figure was always an estimate, not a promise. The real payout was determined by how many of the 36 million eligible customers actually filed claims.
Who qualifies for the Xfinity data breach settlement?
You may have qualified if you meet three criteria. First, you are a living individual residing in the United States or its territories. Second, you used Comcast or Xfinity services around October 2023 when the breach occurred. Third, you received a data breach notification from Comcast around December 18, 2023.
That notification contained a unique Class Member ID. This ID was required to file a claim online. If you never received a notice, you were not part of the settlement class, even if you were an Xfinity customer at the time.
Current and former customers both qualified. You did not need to still have Xfinity service to file.
What proof do you need to file a claim?
For the $50 Alternative Cash Payment, you needed no proof. The Class Member ID from your breach notice was sufficient.
For documented out-of-pocket losses, you needed receipts, bank statements, invoices, or similar records showing expenses tied to the breach. For lost time, you could submit a self-certified written explanation without receipts, but the time had to be reasonably connected to addressing identity theft or prevention.
Every class member, whether they filed a claim or not, was entitled to three years of identity protection services. That included credit monitoring, dark web monitoring, and $1 million in identity theft insurance.
How do you file a claim for the Xfinity data breach settlement?
The claim window closed on September 14, 2026. If you are reading this after that date, you can no longer submit a new claim. The steps below reflect what was required during the open filing period.
- Locate the breach notification Comcast sent you in December 2023.
- Find your unique Class Member ID within that notice.
- Go to the official settlement website at comcastbreachsettlement.com.
- Select your claim type: $50 flat payment or documented losses.
- Enter your Class Member ID and personal information.
- Upload documentation if claiming out-of-pocket losses or lost time.
- Submit the form before the deadline.
- Save your confirmation number for your records.
Paper claims had to be postmarked by September 14, 2026, and mailed to Kroll Settlement Administration at P.O. Box 5324, New York, NY 10150-5324.
What is the deadline for the Xfinity data breach settlement?
The claim deadline was September 14, 2026. This was an extension from the original August 14, 2026 date. Online claims had to be submitted by 11:59 p.m. ET. Mailed claims had to be postmarked by that date.
The opt-out and objection deadlines were July 1, 2026, and those have also passed. If you did not opt out, you remained in the settlement class and are bound by its terms.
When will Xfinity data breach settlement checks be mailed?
No payment date has been announced. Final approval was granted on August 20, 2026, but distribution does not begin immediately after approval.
The appeal window must first close. If an appeal is filed, payments are paused until it is resolved. As of late August 2026, the public docket showed no notice of appeal, but the appeal window remained open.
Once the appeal period runs and any appeals are resolved, the administrator will calculate final payment amounts and begin distribution. There is no confirmed timeline for when checks will mail. Check the official settlement website for updates.
Reality Check
No legitimate settlement administrator will ever text you asking for your bank account or Social Security number to release your payment. Kroll already had your information from the breach notice. Filing a claim was always free. Any third-party service charging a fee to “file for you” was unnecessary and could not do anything you couldn’t do yourself. If someone contacted you after September 14 offering to file a late claim for a fee, that is a scam.
What happens next in the Xfinity data breach settlement?
The case has cleared final approval. The remaining steps are administrative and procedural.
August 20, 2026: Final approval order entered, with attorney fees reduced.
Expected late 2026: Appeal window closes if no notice of appeal is filed.
Expected late 2026 or 2027: Administrator calculates final pro rata payment amounts based on valid claims.
TBD: Distribution of payments to class members.
TBD: Identity protection activation codes distributed to class members who did not receive them automatically.
If an appeal is filed, all post-approval steps are delayed until it is resolved. The official settlement website will post updates as they become available.
Frequently Asked Questions
Is the Xfinity data breach settlement still open for claims?
No. The claim deadline was September 14, 2026, and it has passed.
How much is the Xfinity data breach settlement per person?
The estimated flat payment was $50, with up to $10,000 available for documented losses. Final amounts depend on how many valid claims were filed.
Who was eligible for the Comcast data breach settlement?
Current and former Xfinity customers who received a breach notification in December 2023 with a Class Member ID were eligible.
Did I need a Class Member ID to file?
Yes. The online claim form required the unique ID from your breach notice. Without it, you could not file electronically.
What expenses were covered by the $10,000 cap?
Documented out-of-pocket losses including identity theft repair, credit monitoring fees, credit freezes, and legal fees. Lost time was covered at $30 per hour for up to 5 hours.
Do I still get identity protection if I didn’t file a claim?
Yes. Every class member was entitled to three years of identity protection services, including credit monitoring and $1 million in identity theft insurance, regardless of whether they filed a claim.
What happens if I missed the September 14 deadline?
If the claim window closed before you filed, you cannot submit a new claim. You remain bound by the settlement unless you opted out by July 1, 2026.
Can I still sue Comcast separately over this breach?
Only if you opted out of the settlement by July 1, 2026. If you did not opt out, you gave up your right to pursue separate legal action.
Your next step
The claim window has closed, but the settlement itself is not finished. If you filed a claim before September 14, keep your confirmation number and watch the official settlement website for payment updates. If you did not file, your only remaining benefit is the automatic identity protection enrollment, which does not require a claim form.
The single most important date now is not fixed: it is whenever the administrator announces the payment distribution schedule. Check comcastbreachsettlement.com periodically for that update.
