Affected Xfinity customers can claim a cash payment, reimbursement for losses and lost time, and identity protection under a $117.5 million settlement. The deal resolves the Hasson v. Comcast class action over the October 2023 breach of Xfinity, Comcast's home internet and TV brand.
SC Media reported that Comcast told Maine officials 35,879,455 people were affected, with usernames, hashed passwords, names, contact data, birthdates, last four SSN digits, and security questions exposed SC Media's breach report. The notice went to current or former customers whose data may have been compromised. Readers should check eligibility, compare payment paths, and act before the filing cutoff.
Official resource:
- Explore the official data from Bloomberglaw — Use this primary source to review the underlying data.
Table of Contents
- How the breach happened
- Who qualifies for a claim?
- Cash, reimbursement, or monitoring?
- What identity protection covers
- How to claim before the deadline
How the breach happened
Attackers exploited the Citrix Bleed flaw, tracked as CVE-2023-4966, in Citrix NetScaler systems used by Comcast. Insurance Journal reported the intrusion ran Oct. 16-19, 2023 and bypassed authentication to reach customer systems Insurance Journal's breach account.
That access exposed login credentials and personal identifiers. Hashed passwords are scrambled, but still require a password reset. Names, contact details, birthdates, partial Social Security numbers, and security answers raise phishing and account-takeover risk.
Who qualifies for a claim?
The class covers current or former U.S. Xfinity customers who received an individualized breach notice around Dec.
18, 2023. The notice stated their information may have been compromised. Keep that letter or email because it confirms membership.
- Got a Dec. 2023 Xfinity breach notice with your name on it
- Were a U.S. Xfinity customer at the time of the breach
- File one valid claim by the deadline
Cash, reimbursement, or monitoring?
Bloomberg Law reported that members can elect an alternative cash payment initially estimated at $50 with no documentation, paid electronically if claimed online Bloomberg Law's approval coverage. That path suits people with no clear money loss. It needs little time and no receipts.
Members with proof can instead seek up to $10,000 for documented out-of-pocket losses plus lost time. Accepted proof includes bank statements, receipts, invoices, or police reports, with a written explanation. Choose this path if you paid for freezes, replacement IDs, postage, childcare during recovery calls, or lost wages.
What identity protection covers
All notified members can enroll in three years of credit monitoring, financial monitoring, identity-theft protection, and restoration help through a third-party provider. Credit monitoring flags new accounts and inquiries. Financial monitoring watches for suspicious use of enrolled accounts.
Restoration services help dispute fraud, contact bureaus, and replace documents. Enrollment makes sense even when taking cash, because stolen security answers age slowly. Families should enroll each notified adult separately.
How to claim before the deadline
USA Today reported that cash and reimbursement amounts may be reduced pro rata if claims exceed funds, Comcast denies wrongdoing, and claims must be filed by Sept. 14, 2026 after the Aug. 5, 2026 final-approval hearing USA Today's settlement guide. Pro rata means each payment shrinks when many people claim.
File early and keep copies of every document uploaded. Gather the breach notice, payment proof, and a short timeline of hours spent. Submit the online form before Sept. 14, 2026 and select electronic payment for faster delivery.
You Might Also Like
- Comcast Data Breach Settlement Approved: What Xfinity Customers Can Claim
- Inotiv Data Breach Settlement: How to Distinguish the New Claim Process From Its Securities Case
- UK Data Breach Recovery: What to Do if Someone Opens an Account in Your Name