Comcast Xfinity Settlement: How to File Claim in $117M Lawsuit

Comcast has reached a $117.5 million settlement with a class-action lawsuit related to a 2023 cybersecurity breach that exposed personal information of tens of millions of Xfinity customers. The agreement allows eligible individuals to claim compensation ranging from a flat payment to up to $10,000 for documented losses. Customers must file claims by September 14 to qualify for benefits including cash payments and identity protection services. The breach occurred between October 16 and October 19, 2023, when hackers accessed Comcast systems. The company disclosed the incident in December 2023, notifying affected customers that their personal data might have been compromised. The stolen information includes usernames, passwords, names, contact details, dates of birth, last four digits of Social Security numbers, and security-question answers. These details pose significant risks, enabling cybercriminals to impersonate victims and infiltrate other accounts. The lawsuit, titled Hasson v. Comcast Cable Communications LLC, is being processed in the U.S. District Court for the Eastern District of Pennsylvania. Plaintiffs allege that Comcast failed to implement sufficient cybersecurity measures, leading to the exposure of sensitive customer data. While Comcast denies wrongdoing, it has agreed to establish a settlement fund to address these claims. The fund will cover customer payments, reimbursement of documented losses, identity protection services, administrative costs, attorney fees, and other approved expenses. To be eligible for the settlement, individuals must have received a breach notification from Comcast around December 2023. This means not all Xfinity customers are automatically qualified. Only those who were informed of the potential compromise are included in the settlement class. The notification was sent to customers whose information may have been accessed during the October 2023 breach. The breach highlights a broader issue of increasing data compromises. According to the Identity Theft Resource Center, there were 3,322 publicly reported data breaches in 2025, marking a 79 percent increase compared to the previous five years. Over 80 percent of surveyed consumers received at least one breach notice within the past year, and 88 percent reported facing negative outcomes such as phishing attempts, spam, robocalls, or attempted account takeovers following such notifications. Experts emphasize that the frequency of data breaches has risen steadily since 2020. James E. Lee, president of the Identity Theft Resource Center, noted that this upward trend leaves both individuals and organizations struggling to evaluate their risk levels and take protective actions. Financial literacy instructor Alex Beene pointed out that this case exemplifies how data leaks often lead to large settlements, forcing companies to allocate significant resources to resolve legal and reputational issues. Customers interested in claiming their share of the settlement should visit the official website set up for this purpose. They will need to provide documentation proving their eligibility and any documented financial losses resulting from the breach. The process involves submitting a claim form along with supporting evidence. The deadline for submissions is September 14, ensuring that affected individuals have ample time to apply for compensation. As the settlement moves forward, it serves as a critical step toward addressing the harm caused by the breach. It also underscores the growing importance of robust cybersecurity practices for service providers handling sensitive consumer data. With more cases likely to follow, the outcome of this settlement could influence future approaches to data protection and breach response strategies in the industry.