You could be owed cash in the Comcast data breach settlement
If Comcast emailed you about the Xfinity 2023 cyber breach, you may be owed money from a $117.5 million class-action settlement. Eligible customers can claim an estimated $50 alternative cash payment or seek reimbursement for documented losses up to $10,000. Submit a claim at the official settlement site by September 14, 2026.
Key Takeaways
- The Xfinity 2023 cyber breach exposed personal data for more than 30 million customers after hackers accessed Comcast systems in mid-October 2023.
- You may qualify if Comcast sent you a breach notice around December 18, 2023—not every current Xfinity subscriber is included.
- Payout options include roughly $50 in cash or documented reimbursement up to $10,000, plus identity monitoring after final court approval.
- Claims must be filed online or by mail before September 14, 2026; payments are not automatic.
What Happened in the Xfinity 2023 Cyber Breach?
Between October 16 and 19, 2023, a third party gained unauthorized access to Comcast's internal systems through a vulnerability in Citrix software that court records say had not yet been patched. The incident, sometimes called the Citrix Bleed attack, potentially exposed usernames, passwords, names, contact details, security question answers, dates of birth, and the last four digits of Social Security numbers.
Comcast disclosed the breach publicly in December 2023 and began notifying affected customers by email around December 18. The company has denied wrongdoing, but agreed to a $117.5 million fund to resolve 24 consolidated federal lawsuits alleging inadequate data security. A final approval hearing is scheduled for July 2026.
Who Qualifies for the Comcast Settlement Payout?
You are generally included if you received that December 2023 notice stating your personal information may have been compromised. That means many current or former Xfinity customers who never got an individual alert are not eligible, even if they had service at the time of the hack.
Settlement class members can also access identity defense and restoration services through an enrollment code once the deal receives final court approval. For broader context on how major breaches reshape consumer protections, see our Future Tech & AI Wonders coverage.
How Much Money Could You Receive?
The settlement fund covers several benefit types. Most eligible people can choose an alternative cash payment estimated at about $50, though the final amount depends on how many valid claims are filed and approved administrative costs.
Alternatively, you can seek reimbursement for documented out-of-pocket losses tied to the breach, such as fraud-related expenses or identity theft costs, up to $10,000. Some claimants may also recover limited lost time, typically capped at a few hours at a set hourly rate, if they spent time addressing breach-related problems.
How Do You File a Claim Before the Deadline?
Visit the official Comcast breach settlement website to submit a claim form online or download a paper form postmarked by September 14, 2026. You will need basic identifying information; proof of specific purchases is optional for many claim types.
Act sooner rather than later. Nothing is paid automatically, and missing the deadline means forfeiting both cash benefits and any supplemental reimbursement. If you are unsure whether you received the original notice, search your December 2023 email for messages from Comcast about a data security incident before the window closes.