Comcast data breach settlement
Yes. The Comcast data breach settlement is real: a $117.5 million class action settlement in federal court, Eastern District of Pennsylvania, run by Kroll Settlement Administration. The claim deadline, 14 September 2026, has passed and the judge approved the settlement on 20 August 2026. Payments have not been sent yet.
The site says the court approved the settlement on August 20, 2026 after the August 5 hearing; the claim deadline of September 14, 2026 has passed.
Is it real?
Yes. The case is Hasson v. Comcast Cable Communications, LLC, case number 2:23-cv-05039-JMY, in the US District Court for the Eastern District of Pennsylvania. The court appointed Kroll Settlement Administration to run it, and its only official site is comcastbreachsettlement.com.
How the real notice reached people. Kroll began email notice on April 9, 2026 and postcard notice on April 16, 2026; the court says direct notice reached an estimated 97.69% of the class. Each notice carried a Settlement Class Member ID (the claim form shows it starting 83351 followed by more digits) and an individual enrollment code for CyEx identity protection. The administrator does not publish the email sender address. The site says it is 'the only authorized Settlement Website for this case' and tells people not to contact the court or Comcast. No specific scam warning is published.
To tell a real message from a scam:
- The only official site is comcastbreachsettlement.com.Type it into your browser yourself rather than tapping a link. Claim pages on news and lawyer-advertising sites, and lookalike addresses, are not the administrator.
- Filing costs nothing.No real settlement charges a fee to file a claim or to release a payment. Anyone asking for one is running a scam.
- Nobody needs your passwords.The administrator never asks for your Comcast password, your online banking login or a code texted to you. Payment details go only into the claim form on comcastbreachsettlement.com.
- Check by phone.If you aren’t sure a message is real, call the administrator on (833) 319-2401, the number on comcastbreachsettlement.com, not one in the message.
- Claims have closed.The deadline was 14 September 2026. A message now urging you to file a new claim, or to pay or “verify” your bank details to receive money, is a warning sign. Check on comcastbreachsettlement.com instead.
Who qualifies
All persons residing in the United States and its territories who were sent individual notification of the October 2023 data breach that Comcast disclosed in December 2023 (the site says: if you were sent a notice on or around December 18, 2023). Excludes people who filed or released arbitration claims over the breach before the preliminary approval motion.
Size: over 31 million former and current Comcast customers (court memorandum); Comcast's represented class size was approximately 31,658,000.
It covers people in the United States only (persons residing in the United States and its territories). If you live elsewhere, you are not part of it, whatever a message says.
How much
The total settlement is $117,500,000. What each person can claim:
| Benefit | Amount | Notes |
|---|---|---|
| Out-of-pocket losses | documented losses, within a total cap of up to $10,000 | fraud or identity theft costs, credit freezes, credit reports or monitoring, notary, postage and similar costs on or after October 16, 2023; needs reasonable documentation |
| Lost time | $30 per hour for up to five (5) hours | self-certified; counts within the $10,000 cap |
| Alternative cash payment | estimated in the amount of $50 subject to pro rata adjustment | instead of losses and lost time; no documents needed |
| Identity Defense Services and Restoration Services | three years of CyEx Financial Shield Complete | automatic, no claim needed; includes $1 million identity theft insurance; enrollment code was on the notice; activates after the settlement is final |
An amount marked estimated or pro rata changes with the number of valid claims: more claims, smaller shares. Losses need proof, such as receipts or bank statements.
Deadline and payout
- Claim deadline: (passed). Extended from 2026-08-14 by court order of May 13, 2026.
- Opt-out and objection deadline: .
- Final approval hearing: .
- Final approval granted: .
Payout. The administrator has not published a payment date; benefits are paid after final approval and after any appeals are resolved.
The administrator: “This is the only authorized Settlement Website for this case.”
Filing and payment
- Claims closed on September 14, 2026.
- If you filed, watch comcastbreachsettlement.com for payment news; the administrator will email CyEx enrollment instructions once the settlement is final.
- Anyone sent a notice can still activate the CyEx identity protection after the settlement is final, with the enrollment code from the notice.
Official site: comcastbreachsettlement.com. Phone: (833) 319-2401. Mail: Hasson v. Comcast Cable Communications LLC, c/o Kroll Settlement Administration LLC, P.O. Box 5324, New York, NY 10150-5324.
The breach, and what to do today
Between October 16 and October 19, 2023, criminals exploited the 'Citrix Bleed' vulnerability (CVE-2023-4966) in Comcast's Citrix NetScaler appliances and took Xfinity customers' personal information. Comcast announced it on December 18, 2023.
What was exposed: names; contact information; dates of birth; last four digits of Social Security numbers; secret questions and answers; for some class members, full Social Security numbers and driver's license numbers.
Not the same incident: Comcast data breach (2015) is a different breach, not covered by this settlement.
A settlement pays for what already happened. The data is still out there, so do these now:
- Freeze your credit.In the US it’s free at Equifax, Experian and TransUnion, and no one can open credit in your name while it’s on. Lift it for a day when you apply for credit yourself.
- Get an IRS Identity Protection PIN.It stops anyone filing a tax return in your name with your Social Security number. Request one at irs.gov/ippin.
- Change the password and the answers.On Comcast and anywhere you reused them. Treat security answers like extra passwords.
- Distrust messages about Comcast and this settlement.Breach data is used to make scam messages personal enough to believe, for years afterwards. Go to the company or the official site yourself.
To see which other breaches your email address is in, search it on Have I Been Pwned, then read Breaches.
Not published yet
The administrator and the court had not published these when HARD checked on 7 November 2026, so this page doesn’t guess:
- When payments will be sent.
Questions
Is the Comcast data breach settlement legit?
Yes. It is Hasson v. Comcast Cable Communications, LLC, case 2:23-cv-05039-JMY, in the US District Court for the Eastern District of Pennsylvania. Kroll Settlement Administration runs it for the court, and the only official site is comcastbreachsettlement.com.
Who qualifies for the Comcast settlement?
All persons residing in the United States and its territories who were sent individual notification of the October 2023 data breach that Comcast disclosed in December 2023 (the site says: if you were sent a notice on or around December 18, 2023). Excludes people who filed or released arbitration claims over the breach before the preliminary approval motion.
How much will I get from the Comcast settlement?
Up to documented losses, within a total cap of up to $10,000 for losses you can prove, or estimated in the amount of $50 subject to pro rata adjustment as a cash payment without receipts. The total settlement is $117,500,000. Final amounts depend on how many valid claims there are.
What is the deadline for the Comcast settlement?
The claim deadline was 14 September 2026. It has passed.
When will the Comcast settlement pay out?
The administrator has not published a payment date; benefits are paid after final approval and after any appeals are resolved.
Other settlements: California Casualty, Finastra, Telmate, Covenant Health, AMCA, DaVita, and the rest in Settlements.
Sources
Checked on 7 November 2026. HARD is not part of the case and doesn’t take claims.
- Hasson v. Comcast settlement: home page and important dates, Kroll Settlement Administration, read 7 Nov 2026: approval on August 20, 2026; deadlines; contact.
- Hasson v. Comcast settlement: FAQ, Kroll Settlement Administration, read 7 Nov 2026: benefits, $50 estimate, lost time rate, CyEx services.
- Final Approval Order (ECF 322, filed 08/20/26), US District Court, E.D. Pa. (Judge John Milton Younge), read 7 Nov 2026: dated August 19, 2026; fees cut to $31,725,000 (27%).
- Memorandum on final approval (ECF 321, filed 08/20/26), US District Court, E.D. Pa., read 7 Nov 2026: Citrix Bleed, data types, notice dates, 97.69% reach, 745 opt-outs, 15 objections.
- Order amending preliminary approval order (ECF 287, filed 05/13/26), US District Court, E.D. Pa., read 7 Nov 2026: claim deadline moved from August 14 to September 14, 2026.
- Claim form, Kroll Settlement Administration, read 7 Nov 2026: Settlement Class Member ID format.