Overview
- Eligible people are current or former Xfinity customers who received a December 2023 breach notice, and they can file online at the official site comcastbreachsettlement.com run by Kroll Settlement Administration.
- Key dates are set: opt-out or object by June 1, 2026, a final approval hearing on July 7, 2026 in Philadelphia, and a claim deadline of August 14, 2026.
- Claim options include an estimated $50 cash payment with no documents or up to $10,000 for documented losses, with lost time reimbursed at $30 per hour for up to five hours and three years of identity monitoring with $1 million in insurance for the class.
- The breach happened October 16–19, 2023 when attackers exploited the Citrix Bleed flaw (CVE-2023-4966) in unpatched NetScaler systems, exposing most users’ usernames and hashed passwords and, for some, names, contact details, birth dates, last-four Social Security numbers, and security-question answers that heighten account-takeover risk.
- Comcast denies wrongdoing and payouts will follow court approval, while the settlement fund will be reduced by attorneys’ fees and administration costs and class members should ignore fake help solicitations since filing a claim is free and no one legitimate will ask for bank or Social Security numbers by phone.