Yes, ComcastBreachSettlement.com is the official claims site for the proposed Xfinity breach settlement. Identify a real notice by matching its case name, Kroll contacts, and typed domain instead of clicking email links. DataBreaches.net reports the proposed $117.5 million fund would cover about 31.6 million notified customers in Hasson v.
Comcast Cable Communications LLC, Case No. 2:23-cv-05039 DataBreaches.net's February 2026 report. It stems from the October 2023 Xfinity systems intrusion.
Official resources:
- Explore the official data from FTC — Use this primary source to review the underlying data.
- Explore the official data from Databreaches — Use this primary source to review the underlying data.
Table of Contents
- What breach led to this settlement?
- What is the official settlement site and case?
- How do you verify a notice without getting scammed?
- Who can claim, and what could change?
What breach led to this settlement?
Hackers used the Citrix Bleed vulnerability to enter Xfinity internal systems between October 16-19, 2023. Comcast said it found the activity October 25 during a cybersecurity exercise, according to TechCrunch's December 2023 report.
Comcast told Maine's attorney general the incident affected 35,879,455 people. SC World reported the compromised data included names, contact information, dates of birth, and partial Social Security numbers.
What is the official settlement site and case?
The related class action is Hasson v. Comcast Cable Communications LLC in the U.S. District Court for the Eastern District of Pennsylvania.
OpenClassActions identifies the administrator as Kroll Settlement Administration LLC and the official claims site as ComcastBreachSettlement.com OpenClassActions' settlement listing. The same listing gives a final-approval hearing for August 5, 2026 at 12:30 p.m. Only that domain and Kroll channel represent the proposed $117.5 million fund. Any look-alike domain, different administrator, or different case number points away from the official process.
How do you verify a notice without getting scammed?
Type ComcastBreachSettlement.com into your browser yourself. Do not use email buttons, text links, or search ads to reach a claims form. The Federal Trade Commission warns that scammers build fake breach-settlement sites and advises reaching the real site through a trusted FTC page rather than email or ads the FTC's warning on fake settlement sites.
- Match the case name Hasson v. Comcast Cable Communications LLC and the Eastern District of Pennsylvania court
- Match administrator Kroll Settlement Administration LLC, P.O. Box 5324 New York NY 10150-5324, and phone 833-319-2401, as listed by IssueWire via California Consumer Banking
- Check that mailed or emailed material directs you to type the same domain rather than click through
- Treat urgency, gift-card requests, password demands, or payment to claim as fraud signs
Who can claim, and what could change?
ClaimHub24 describes eligible claimants as people sent an individual breach notice around December 18, 2023. It lists an online or postmarked claim deadline of September 14, 2026 and an opt-out or objection deadline of July 1, 2026. Class Action Watch describes reported benefits as up to $10,000 for documented out-of-pocket losses and lost time, plus a no-documentation cash alternative of about $50.
It notes payments face pro-rata adjustment and court-approved fees. DataBreaches.net notes Comcast denies wrongdoing and the fund remains a proposed compromise requiring final court approval, so amounts and deadlines can change by court order. Type the domain yourself before you enter any personal data.
You Might Also Like
- Comcast Data Breach Settlement Approved: What Xfinity Customers Can Claim
- Xfinity Data Breach Settlement: Cash Payments, Lost Time, and Identity Protection
- Website Outage vs. Data Breach: Why Downtime Alone Does Not Establish Data Theft