Comcast Xfinity Data Breach Settlement 2026: $117.5 Million — What Subscribers Can Claim
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
Comcast agreed to pay $117.5 million over the October 2023 Xfinity breach that exposed names, Social Security numbers, and security questions of tens of millions of customers. Claim an estimated $50 flat payment or up to $10,000 in documented losses by September 14, 2026.
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology
Reviewed by Leonard Goldberg, Editor · Last updated
What the Lawsuit Alleges
In October 2023, attackers exploited a vulnerability in Citrix networking software ('Citrix Bleed') to access Comcast's Xfinity systems before the patch was applied. Exposed data included usernames, hashed passwords, and for many customers names, contact information, dates of birth, the last four digits of Social Security numbers, and secret security questions and answers. The Comcast Xfinity lawsuit — the consolidated class action Hasson v. Comcast — alleged Comcast waited too long to patch a publicly disclosed vulnerability and failed to protect subscriber data. Comcast denies wrongdoing but agreed to one of the largest data-breach settlements on record: $117.5 million.
Case Details
U.S. District Court for the Eastern District of Pennsylvania — Case No. 2:23-cv-05039-JMY. Official administrator site: comcastbreachsettlement.com.
Current Status
How to File — and How to Reach the Administrator
You do not need a lawyer and you do not pay anything. Claims go directly to the court-appointed administrator. Anyone who asks you for a fee to file, or to “check your status”, is not the administrator.
The official, court-authorized settlement website is comcastbreachsettlement.com — type that address into your browser yourself rather than following a link from an email or a text message.
The case is Hasson v. Comcast Cable Communications LLC and the court-appointed administrator is Kroll Settlement Administration LLC.
If your notice never arrived, was deleted, or the claim form will not accept your details, contact the administrator directly:
- By phone: (833) 319-2401
- By post: Hasson v. Comcast Cable Communications LLC, c/o Kroll Settlement Administration LLC, P.O. Box 5324, New York, NY 10150-5324
The claim deadline was September 14, 2026 and has passed — submitted online by that date, or a paper claim form postmarked by that date.
Settlement Insight is not the administrator and has no access to their claimant records, so we cannot look up your ID or check your claim for you.
Who Is Affected & Can You Join?
Xfinity customers whose personal information was compromised in the October 2023 incident — Comcast notified affected account holders, and the administrator validates claims against breach records. If you had an Xfinity account (internet, TV, or mobile) in fall 2023 and received a breach notice or believe your data was involved, check the official site.
Is There a Payout?
How cases like this one end
Our copy of the federal courts’ own case database covers 129,730 other contract casesclosed in U.S. federal district courts between 2015 and 2026, 6% of them filed as class actions:
- 30.7% ended in a settlement recorded by the court. Another 20.2% were dismissed voluntarily, which often follows a private settlement — so the real settlement share sits between 30.7% and 50.9%.
- 7.5% were decided on a motion before any trial.
- 1 in 72 reached a trial (1.4%), after a median of 29.3 months.
- Median time from filing to the end of the case: 7.6 months.
- Only 7,691 of them (5.9%) record a money award at all; the median of those is $407,000.
These are base rates for this type of case (federal other contract cases) — not a prediction about this lawsuit, and not legal advice. Source: Federal Judicial Center, Integrated Database (civil), analysed by Settlement Insight. Cases heard in state courts are not included.
Case Timeline
- 1
October 2023 — Citrix Bleed Exploited
Attackers use the publicly disclosed Citrix vulnerability to access Xfinity systems between roughly October 16 and 19, before Comcast completes patching.
- 2
December 2023 — Disclosure
Comcast discloses the breach in regulatory filings and begins notifying customers; class actions follow within days and consolidate in the Eastern District of Pennsylvania.
- 3
2026 — $117.5M Settlement
After two years of litigation, Comcast agrees to a $117.5 million settlement fund plus three years of monitoring for the class.
- 4
September 14, 2026 — Claim Deadline (passed)
The last day to file online or by mail at comcastbreachsettlement.com. The window is now shut; the administrator is validating the claims that came in.
- 5
August 20, 2026 Approval → Late 2026 / 2027 Payments
Final approval was granted August 20, 2026 (Judge Younge, E.D. Pa.; attorneys’ fees set at $31,725,000 = 27% of the fund). Distribution follows the Effective Date — after any appeal period — plus claims processing; the administrator announces payment timing on the official site.
Court Documents
Read the key filings yourself. We host copies of the public court record, free to read and share.
Case: HASSON v. COMCAST CABLE COMMUNICATIONS LLC, No. 2:23-cv-05039 (E.D. Pa.)
- ComplaintDec 19, 2023 · ECF No. 1 · 26 pages · PDF, 409 KB
- Final Approval OrderAug 20, 2026 · ECF No. 322 · 1 page · PDF, 148 KB
4 more documents in this case
- Consolidated Amended ComplaintJul 1, 2024 · ECF No. 67 · 156 pages · PDF, 2.0 MB
- Settlement AgreementDec 23, 2025 · ECF No. 275-2 · 56 pages · PDF, 2.2 MB
- Motion for Final Approval of Settlement and Attorneys' FeesJul 15, 2026 · ECF No. 315 · 3 pages · PDF, 147 KB
- Settlement Administrator's Declaration on Notice and ClaimsDec 23, 2025 · ECF No. 275-6 · 35 pages · PDF, 1.1 MB
A complaint states one side's allegations; only the court's orders decide anything. Copies of federal court records (PACER) via CourtListener, Free Law Project. Not legal advice.
Scam & Misinformation Warnings
Whenever a brand lawsuit goes viral, scam sites and bad actors follow. Watch for these red flags:
Fake Xfinity 'breach compensation' calls
Comcast will not call asking for your Social Security number or a fee to 'release' settlement money. File only at comcastbreachsettlement.com.
Password-reset phishing waves
Because the breach exposed security questions, phishing that impersonates Xfinity password resets remains common. Go to xfinity.com directly — never through email links — and enable 2FA.
Paid claim-filing services
The claim form is free and short. Services charging 25–40% of your payment to file it add nothing.
Frequently Asked Questions
How much is the Xfinity settlement payout?
The no-documentation alternative cash payment is estimated at $50 (pro rata — final amount depends on claim volume). Documented out-of-pocket losses and lost time can be reimbursed up to $10,000 combined. Everyone valid also gets three years of credit + dark-web monitoring with $1M identity-theft insurance.
When is the claim deadline?
It was September 14, 2026, and it has passed — no new claims are being accepted. Some early press coverage said August 14; that was wrong either way.
Am I eligible?
If your personal information was compromised in Comcast's October 2023 Xfinity breach. Affected customers were notified, and the administrator validates against breach records — current and former Xfinity subscribers from fall 2023 should check the official site.
What was exposed?
Usernames and hashed passwords for ~36 million accounts per Comcast's disclosure; for many customers also names, contact details, dates of birth, last four SSN digits, and security questions/answers — the last being particularly dangerous for account-takeover attacks.
When will payments arrive?
Final approval was granted on August 20, 2026 (E.D. Pa., Judge Younge). Payments follow the settlement’s Effective Date — the order must first become final, meaning no appeal is filed within the appeal period or any appeal is resolved; objections were filed, so an appeal is possible — plus claims processing after the September 14, 2026 deadline. Realistic distribution: 2027, late 2026 at the very earliest. The administrator posts timing updates on comcastbreachsettlement.com.
Should I take the $50 or document my losses?
If you spent real money or significant time dealing with fraud traceable to this breach — new-account fraud, credit freezes, disputed charges — the documented path pays up to $10,000 and is worth the paperwork. If not, the $50 flat claim takes five minutes.
I got an email from Kroll about the Comcast settlement — is it real?
Almost certainly yes. Kroll Settlement Administration LLC is the court-appointed administrator in Hasson v. Comcast (E.D. Pa., No. 2:23-cv-05039), and it sent claim reminders before the September 14, 2026 deadline. Now that the deadline has passed, any message asking you to pay a fee to “release” or “check” a payment is not from Kroll. Verify instead of trusting the email: type comcastbreachsettlement.com into your browser yourself (don't click links if unsure), use the ID Look Up Form with the notice ID from the email, or call the administrator at (833) 319-2401. Red flags for fakes: requests for payment, gift cards, bank logins, or your full SSN by reply — the real claim form never asks for any of that.
Who is Kroll Settlement Administration?
The neutral, court-appointed settlement administrator — not a law firm hired to sue you and not a scam outfit. Kroll validates claims against Comcast's breach records and pays out the fund. Contact: Hasson v. Comcast Cable Communications LLC, c/o Kroll Settlement Administration LLC, P.O. Box 5324, New York, NY 10150-5324 · (833) 319-2401 · comcastbreachsettlement.com.
Separate from this case: were you injured in the last 2 years?
Class-action payouts are fixed amounts through an administrator. A personal injury claim is a different case — and often worth far more. Free estimate, no obligation.
Related Consumer Brand Lawsuits
Google Assistant Settlement
Google Assistant Settlement 2026 — $68M Privacy Payout
Disney Streaming Settlement
Disney $50M Streaming Settlement — YouTube TV, DirecTV
LabCorp Data Breach Settlement
LabCorp Data Breach Settlement 2026 — File by Sept 3
ZOLL Data Breach Settlement
ZOLL Data Breach Settlement 2026 — Heart Device Data