Xfinity breach settlement today: Who can claim up to $10,000

For millions of current and former Xfinity customers, an email or letter from December 2023 could now be worth real money. Comcast has agreed to a $117.5 million settlement after an October 2023 cyberattack exposed personal information tied to an estimated 35.8 million customers. Eligible class members have until September 14, 2026, to file a claim, with possible benefits ranging from an estimated $50 cash payment to as much as $10,000 for documented losses.

How Events Unfolded

The breach occurred between October 16 and October 19, 2023. Information exposed in the incident included usernames, passwords, contact details, dates of birth, partial Social Security numbers and security questions, according to notices and court filings described by the news reports.

A class-action lawsuit followed, alleging that Comcast failed to adequately protect customers' personal information. Comcast denied wrongdoing but agreed to settle the case for $117.5 million and provide affected customers with three years of identity theft protection services.

Eligibility is narrower than simply having used Xfinity. The settlement covers current or former U.S. customers whose information was accessed and who received a breach notification from Comcast in December 2023. Those notices included a unique Class Member ID needed to submit a claim.

The claim deadline was initially August 14 but has been extended to 11:59 p.m. ET on September 14, 2026, for online submissions. Paper claim forms must be postmarked by the same date. The CNBC settlement guide also explains how customers who cannot locate their ID can check whether one was assigned to them.

Digging Deeper

The settlement offers three primary forms of compensation. Customers who can connect financial harm directly to the breach may request reimbursement of up to $10,000. Qualifying expenses may include legal fees, credit monitoring, credit freezes and costs related to repairing identity theft.

Class members may also claim compensation for time spent responding to the breach or taking preventive measures. The settlement allows $30 per hour for up to five hours, creating a maximum lost-time claim of $150.

People without documented expenses can choose an alternative cash payment estimated at $50. That figure is not guaranteed. The final amount can rise or fall depending on the number of valid claims, the money available after approved costs and how the settlement fund is distributed.

Class Member ID

A unique identification number sent to customers Comcast identified as affected by the breach.

Out-of-pocket loss

A documented expense directly connected to responding to fraud, identity theft or the exposure of personal information.

Alternative cash payment

A simpler payment option for eligible members who do not submit documented losses or lost-time expenses.

What People Are Saying

The plaintiffs alleged that Comcast maintained inadequate data-security protections and failed to properly safeguard customer information. Comcast has denied those allegations and did not admit wrongdoing as part of the settlement.

The company nevertheless agreed to the financial payout and identity-protection benefits. Nearly $40 million of the proposed fund has been earmarked for attorneys' fees, subject to court approval, leaving the remaining money to cover valid customer claims and other approved settlement costs.

Reporting from USA Today's settlement coverage emphasizes that not every Comcast customer qualifies automatically. Receiving the December 2023 breach notice is the central indicator that a person belongs to the settlement class.

Putting It in Perspective

The incident exposed information that can be valuable to identity thieves because several data points can be combined. A password may be changed quickly, but a date of birth or partial Social Security number cannot be replaced in the same way. Security questions can also create risks when customers reuse similar answers across multiple accounts.

For customers seeking the maximum reimbursement, documentation will matter. Receipts, bank records, legal bills, credit-monitoring invoices and records of fraudulent transactions can help connect a claimed expense to the breach. People requesting lost-time compensation should also keep a clear record of the tasks completed and the hours spent.

Even eligible customers who suffered no measurable financial loss may still choose the estimated $50 payment. Because the settlement fund is shared, however, a large volume of claims could reduce individual payouts.

Looking Ahead

A final approval hearing is scheduled for August 5, 2026. Payments are expected to begin after court approval, although any appeals could delay distribution.

Claims will continue to be accepted through September 14. Eligible customers should locate their Class Member ID, decide which benefit matches their circumstances and submit supporting documents before the deadline. The exclusion and objection deadline passed on July 1, 2026, so the remaining action for most class members is filing a claim.