Comcast Data Breach Lawsuit Settlement: $117.5M Payments and Status

The Comcast data breach lawsuit settlement is a $117.5 million class action deal over a 2023 cyberattack that exposed information from about 36 million Xfinity customer accounts. The case, Hasson v. Comcast Cable Communications, sits in federal court in Pennsylvania, and Comcast denied wrongdoing. The court granted final approval on August 20, 2026, and the claim deadline passed on September 14, 2026. As a result, payments to approved claimants now depend on the settlement becoming final. Here is what happened, what the settlement offers, and when people may get paid.

Comcast data breach settlement at a glance

What happened in the Comcast data breach?

In October 2023, hackers exploited a flaw in Citrix software, widely called “Citrix Bleed,” that Comcast used in its network. Between October 16 and October 19, 2023, they gained access to Xfinity systems. Comcast announced the breach on December 18, 2023, and said it affected about 35.9 million customer accounts.

In total, the stolen data included usernames and hashed passwords. For some customers, it also included names, contact details, the last four digits of Social Security numbers, dates of birth, and security questions and answers. In response, Comcast required customers to reset their passwords.

What did the Comcast lawsuit claim?

Soon after the announcement, customers filed class actions, and the court combined them in the Eastern District of Pennsylvania. The plaintiffs claimed that Comcast failed to patch the Citrix flaw in time and did not adequately protect customer data. However, Comcast denied the allegations, and no court ruled on whether they were true.

Comcast settlement benefits

Specifically, class members could claim:

• Documented losses and lost time: Up to $10,000 combined, with proof such as receipts or bank statements.
• Alternative cash payment: A pro rata payment that settlement trackers have estimated at about $50, with no documents needed.
• Identity protection: Identity defense and restoration services, which class members receive automatically once the settlement is final.

According to the official Comcast settlement website, the class includes people who were sent a notice of the breach on or around December 18, 2023. In addition, the fund also pays notice and administration costs, attorneys’ fees and service awards.

Settlement timeline

When will Comcast settlement payments arrive?

In general, payments go out only after the settlement’s effective date, which follows the appeal period and claim review. According to ClassAction.org and other trackers, the court granted final approval in part and reduced attorneys’ fees to 27% of the fund. Because objectors could still appeal, payments may not arrive until late 2026 or 2027. As of now, the settlement administrator has not posted a payment date.

Meanwhile, be wary of scam messages about the settlement. The administrator, Kroll Settlement Administration, will never ask you to pay a fee to receive money.

What Xfinity customers should do now

• Change reused passwords. If you used your Xfinity password on other sites, change it everywhere.
• Turn on two-factor login. Add a second step to your Xfinity and email accounts.
• Freeze your credit. A free credit freeze stops new accounts in your name.
• Watch for phishing. Scammers may use leaked details to send convincing fake messages.

For other recent data breach cases, see our explainers on the Fidelity Investments data breach lawsuit and the Cash App class action settlement.

Current status of the Comcast data breach settlement

First, the court granted final approval on August 20, 2026, and the claim period closed on September 14, 2026. However, payments depend on the appeal period and claim processing, and no payment date has been posted yet. Meanwhile, Comcast continues to deny wrongdoing.

Last updated: October 17, 2026. We checked the official settlement website and public reports on this date.

Conclusion: the Comcast settlement in brief

The Comcast data breach lawsuit settlement resolves claims over the October 2023 Citrix Bleed attack, which exposed data from about 36 million Xfinity accounts. Comcast denied wrongdoing but agreed to a $117.5 million fund offering up to $10,000 for documented losses, an estimated $50 cash option, and identity protection services.

Overall, the claim period is closed, and payments will follow once the settlement is final. More cases are explained in our Settlements section.

Frequently asked questions

How much is the Comcast data breach settlement?

The settlement fund is $117.5 million. Individual payments include up to $10,000 for documented losses or an alternative cash payment estimated at about $50.

Can I still file a Comcast settlement claim?

No. The claim deadline was September 14, 2026.

When will Comcast settlement payments be sent?

After the settlement becomes final and claims are processed. Trackers expect late 2026 at the earliest, and possibly 2027.

What data was exposed in the Comcast breach?

Usernames and hashed passwords, and for some customers names, contact details, the last four digits of Social Security numbers, dates of birth and security questions.

Did Comcast admit wrongdoing?

No. Comcast denied the claims and agreed to settle.

Sources

• Hasson v. Comcast Cable Communications LLC: official settlement website
• ClassAction.org: $117.5M Comcast settlement ends class action lawsuit over October 2023 cyberattack
• Comcast: Notice to customers of data security incident (December 18, 2023)
• Settlement Insight: Comcast Xfinity data breach settlement status