Comcast customers who were caught in a major data breach in October 2023 have access to a $117.5 million settlement approved in January 2026. If you received a breach notification from Comcast in December 2023 informing you that your account was compromised, you likely qualify to claim a payout ranging from $50 to $10,000 or more, depending on whether you can document losses from the incident. The settlement, which affects approximately 35.8 million current and former Xfinity customers, comes with an extended deadline of September 14, 2026—giving you roughly two months to file your claim.
The settlement addresses a data breach that occurred over three days, October 16–19, 2023, during which attackers accessed Comcast customer accounts containing sensitive personal information. The compromised data included usernames, full contact information, dates of birth, encrypted passwords, partial Social Security numbers, and answers to security questions. Beyond the direct cash payout, all eligible claimants automatically receive three years of free identity monitoring through CyEx Financial Shield, plus $1 million in identity theft insurance coverage at no cost.
Table of Contents
- Who Qualifies for the Comcast Settlement and Breached Account Payment?
- What Personal Information Was Exposed in the Comcast Xfinity Breach?
- What Payment Options Are Available in the Comcast Settlement?
- How Do You File a Claim for the Comcast Data Breach Payout?
- What Happens If You Miss the September 14, 2026 Deadline or Never Received a Breach Notice?
- Is the $117.5 Million Settlement Guaranteed to Reach All 35.8 Million Customers?
- What Protections and Benefits Come Automatically With the Comcast Settlement?
- Frequently Asked Questions
Who Qualifies for the Comcast Settlement and Breached Account Payment?
To be eligible for a payout from the Comcast data breach settlement, you must be a U.S. resident who received a formal breach notification letter from Comcast in December 2023. That notification would have specifically referenced the October 2023 data breach affecting Xfinity accounts. Simply being a current or former Comcast customer is not enough—you had to have received the official notice that your account was exposed in this particular breach.
The settlement defines class membership narrowly to avoid disputes over who was actually affected. If you were an Xfinity customer during the October 16–19, 2023 breach window, you should have received a notification letter. If you still have that letter, it confirms your eligibility. If you’re unsure whether you received notice and believe you were a customer during that period, you can visit the official settlement website at comcastbreachsettlement.com to verify your eligibility or check claim status. Note that customer status alone—without the documented breach notification—does not guarantee class membership in some interpretations of the settlement agreement.
What Personal Information Was Exposed in the Comcast Xfinity Breach?
The October 2023 Comcast breach exposed a broad range of personally identifiable and sensitive financial information. Attackers gained access to customer usernames and passwords (though the passwords were encrypted, the fact that they were exposed means savvy attackers could attempt to crack them). They also obtained full contact information including email addresses and phone numbers, dates of birth, and partial Social Security numbers—typically the last four digits, which can be used for identity verification or combined with other data to commit fraud.
Additionally, the breach exposed answers to security questions associated with customer accounts, creating a compounding identity risk. An attacker with your date of birth, partial SSN, and security question answers has multiple data points to attempt account takeovers or commit identity fraud. This multi-layered exposure is why all settlement claimants receive complimentary identity monitoring—even those who take the flat $50 payment without documenting losses. The three-year monitoring period is designed to catch unauthorized credit applications or accounts opened in your name, giving you time to contest fraudulent activity before it severely damages your credit profile.
What Payment Options Are Available in the Comcast Settlement?
The settlement provides two distinct payment pathways, accommodating both customers who were minimally impacted and those who suffered documented financial losses. The simpler option is a flat $50 payment with no paperwork required. You do not need to submit receipts, affidavits, or any proof of harm to receive this payment; Comcast and the settlement administrators simply distribute $50 to each eligible claimant who files a claim form by the September 14, 2026 deadline.
The second payment option requires documentation but offers substantially higher compensation. If you can prove actual losses from the breach—such as fraudulent charges, credit monitoring services you purchased out of pocket, or time spent resolving identity theft or account takeovers—you can claim up to $10,000 for documented losses plus up to $150 for time spent addressing the breach. For example, if someone used your compromised account information to open a credit card and charge $3,000 in fraudulent purchases, or if you spent 20 hours disputing charges and working with creditors, you can claim those losses with supporting documentation. The settlement process accepts receipts, credit card statements, police reports for fraud, and detailed time logs as evidence.
How Do You File a Claim for the Comcast Data Breach Payout?
Filing a claim requires you to submit a claim form by September 14, 2026. The official settlement website, comcastbreachsettlement.com, hosts the claim form and provides step-by-step instructions. If you are claiming only the $50 flat payment, the process is straightforward—you fill out your basic information and submit the form online. No supporting documentation is required.
If you are pursuing the documented-loss option, you will need to gather and organize your supporting evidence before submitting your claim. This might include bank statements showing fraudulent charges, invoices for credit monitoring services you purchased, phone records or emails documenting your time spent resolving the breach, and any official fraud reports filed with law enforcement or the Federal Trade Commission. The settlement administrators will review your documentation and approve payments based on the evidence provided. It is important to note that not all documentation is equally weighted—receipts for actual financial losses carry more weight than estimated time claims, so if you have both, lead with the financial evidence.
What Happens If You Miss the September 14, 2026 Deadline or Never Received a Breach Notice?
The September 14, 2026 deadline is firm, though it represents an extension from the original August 14 deadline, which suggests the settlement administrators may be responsive to logistical challenges. Once the deadline passes, you lose the right to file a claim for cash compensation. However, the settlement’s automatic benefits—the three years of CyEx Financial Shield identity monitoring and $1 million identity theft insurance—may still apply, though you should verify coverage status if you miss the claim deadline. If you never received a breach notification letter from Comcast in December 2023 but believe you were an Xfinity customer when the breach occurred, you have a few options.
First, check your email, postal mail, and spam folders for any Comcast communication from December 2023 referencing the data breach. If you find nothing, you can contact Comcast directly to ask whether your account was included in the breach. You can also visit comcastbreachsettlement.com and enter your information to check eligibility. Some settlement administrators allow late claim filings in documented hardship cases, though this is not guaranteed, and you would need to contact the settlement claims administrator to inquire about exceptions.
Is the $117.5 Million Settlement Guaranteed to Reach All 35.8 Million Customers?
This is a critical question with a complicated answer. The settlement’s total fund is capped at $117.5 million. If all 35.8 million eligible customers file claims requesting only the flat $50 payment, the fund would be insufficient—$50 multiplied by 35.8 million exceeds $1.7 billion. In practice, not all eligible customers will file claims. Settlement experience shows that claim rates typically range from 20 to 50 percent, meaning 7 to 18 million customers in this case might actually submit claims.
If that occurs, the $117.5 million fund can comfortably cover all flat-rate payments plus a significant portion of documented-loss claims. However, if an unexpectedly high percentage of customers file documented-loss claims requesting amounts near the $10,000 maximum, the settlement fund could face allocation issues. In such scenarios, settlement agreements typically employ a pro-rata reduction, meaning all claimants receive a percentage of their approved claim amount rather than the full amount. The settlement administrator will provide detailed information on allocation rules if the fund becomes oversubscribed. Given the structure of the settlement, the $50 flat payment is essentially guaranteed unless the legal process unravels—which is rare—but larger documented-loss payouts are subject to the limits of the total fund.
What Protections and Benefits Come Automatically With the Comcast Settlement?
Every member of the settlement class automatically receives three years of CyEx Financial Shield identity monitoring and $1 million in identity theft insurance coverage at no cost, regardless of whether they file a claim for cash compensation. You do not need to opt in or take any action to receive these protections—they apply automatically to all eligible customers identified in the settlement. The identity monitoring includes credit report monitoring, Social Security number monitoring, and alerts if your information appears on the dark web or in data breach databases.
The identity theft insurance component protects you against financial losses if someone uses your compromised personal information to commit fraud. For example, if a criminal opens a credit card account using your identity and your partial SSN from the Comcast breach, and that account is used to make purchases, the $1 million insurance can cover those fraudulent charges along with associated costs like legal fees or notary services required to dispute the fraud. The three-year duration of these benefits is intentional—it gives you a protection window that extends well beyond the immediate post-breach period, since identity fraud can emerge months or even years after a breach occurs.
Frequently Asked Questions
How do I know if I was affected by the Comcast breach?
You should have received a breach notification letter from Comcast in December 2023 if your account was compromised in the October 2023 breach. Check your email, postal mail, and spam folders, or visit comcastbreachsettlement.com to verify eligibility.
Can I claim the settlement if I’m no longer a Comcast customer?
Yes. The settlement covers current and former Xfinity customers who received a breach notification in December 2023, regardless of whether you still maintain an active account.
What documentation do I need for the $10,000 documented-loss claim?
You need receipts or statements showing actual financial losses from the breach (fraudulent charges, credit monitoring services purchased out-of-pocket) and documentation of time spent resolving the breach (email records, phone logs, police reports for fraud).
Do I have to choose between the $50 flat payment and the documented-loss option?
You choose one or the other when you file your claim form. You cannot claim both options simultaneously, so decide which path applies to your situation before submitting.
What if my documented-loss claim is denied?
You can request reconsideration or file an appeal with the settlement claims administrator. The settlement process typically includes an appeal mechanism for disputed claims, outlined in the official settlement documents at comcastbreachsettlement.com.
Will I still receive identity monitoring if I don’t file a cash claim?
Yes. All eligible class members receive three years of CyEx Financial Shield identity monitoring and $1 million identity theft insurance automatically, whether or not you submit a claim for cash compensation.