Key Takeaways
- Who can claim: Current or former Xfinity (Comcast) customers who received a breach‑notification email in December 2023 regarding the October 2023 cybersecurity incident.
- What the settlement covers: Up to $117.5 million to compensate affected consumers for documented out‑of‑pocket expenses, lost time, or an alternative flat cash payment.
- Maximum individual payout: Documented loss claims can receive up to $10,000; those opting for the simple cash option may receive approximately $50 (exact amount varies with total claim volume).
- Important dates: Claim submission deadline is September 14, 2026 (online or post‑marked paper). Final approval hearing is set for August 5, 2026, with payouts expected thereafter.
- How to file: Submit a claim online via the Comcast settlement website or mail a completed paper form; supporting documentation is required for the $10,000 option, while the $50 option needs only verification of eligibility.
- No admission of wrongdoing: Comcast denies liability but agreed to the settlement to resolve the class‑action suit alleging inadequate data‑security practices.
On July 14, 2026, USA Today reported that Comcast has agreed to pay $117.5 million to settle a class‑action lawsuit stemming from a massive data breach that occurred in October 2023. The breach exposed personal information belonging to millions of Xfinity customers, including usernames, passwords, contact details, dates of birth, and the last four digits of Social Security numbers. Plaintiffs alleged that Comcast “failed to properly protect personal information” and maintained “inadequate data security.” Although Comcast continues to deny any wrongdoing, it opted to settle the litigation to avoid prolonged court battles.
The settlement, now administered through a dedicated website, is open for claims from anyone who was notified of the breach in December 2023. Not every Comcast subscriber automatically qualifies; eligibility is limited to those whose data was actually accessed during the incident and who received the official breach notice. Claimants must act by the September 14, 2026 deadline—whether filing online or mailing a paper form that must be post‑marked by that date.
Two payout pathways are available. Consumers who can substantiate out‑of‑pocket losses (e.g., costs for credit monitoring, identity‑theft protection, fraudulent charges, or time spent remedying the breach) may file a claim for reimbursement, with a maximum award of $10,000 per qualified claimant. The actual amount each individual receives will depend on the total settlement fund ($117.5 million) divided by the number and size of all validated loss claims.
For those who prefer a simpler route, Comcast offers an alternative cash payment of roughly $50. This flat amount does not require documentation of specific losses; claimants only need to verify that they received the breach notice. However, the $50 figure is also subject to adjustment: if a large number of people elect this option, the per‑person payout may be reduced proportionally to stay within the settlement pool. The same September 14 deadline applies to the flat‑cash option.
After claims are submitted, a final approval hearing is scheduled for August 5, 2026. Assuming the court grants final approval, the settlement administrator will begin processing payments shortly thereafter. While USA Today did not specify an exact disbursement date, historical timelines suggest that checks or electronic transfers are typically issued within a few weeks to a couple of months post‑approval, contingent on the volume of claims and any necessary audits.
The settlement reflects a growing trend in which large corporations opt to resolve data‑breach class actions through monetary compensation rather than admitting fault. For Comcast, the agreement provides a mechanism to address consumer concerns while limiting further litigation exposure. Affected Xfinity customers are encouraged to review the settlement website promptly, gather any relevant receipts or records of expenses incurred because of the breach, and submit their claims before the September 14 cutoff to ensure they receive whatever compensation they are entitled to under the terms of the deal.