Comcast Will Pay $117.5 Million to Settle Data Breach Lawsuit - How to File
Comcast has agreed to pay $117.5 million to settle a class-action lawsuit over a 2023 Xfinity data breach that exposed personal information belonging to millions of customers. The settlement is now open and accepting claims.
The breach occurred in October 2023 and the exposed data included usernames, passwords, contact information, dates of birth, and the last four digits of customers' Social Security numbers. The lawsuit alleged Comcast "failed to properly protect personal information" and had "inadequate data security." Comcast has denied any wrongdoing as part of the settlement.
Who Qualifies
Eligibility is specific. You're part of the settlement class only if you received a breach notification letter from Comcast in December 2023. Not every current or former Xfinity customer automatically qualifies — if you weren't formally notified at the time, you're likely not eligible to file a claim now.
How Much You Could Actually Get
This is where it's worth setting realistic expectations. The settlement offers two paths.
If you can document actual out-of-pocket losses or lost time connected to the breach — fraud charges, time spent freezing accounts, identity theft recovery costs — you can file a claim for reimbursement up to a maximum of $10,000. That maximum is a ceiling, not a guarantee, and the final amount depends on how much documentation you provide and how many other people file similar claims against the same pool of money.
If you don't want to go through that documentation process, there's a simpler flat alternative payment of $50. But here's the catch that rarely makes the headline — that $50 figure is also not guaranteed. It's explicitly described as subject to change based on the total number of people who file claims. The settlement fund is fixed at $117.5 million; if far more people file than expected, each individual payout shrinks accordingly.
Both claim types have the same deadline — August 14.
Why Your Actual Check Might Be Smaller Than You'd Hope
If this all sounds familiar, it should. This is exactly how nearly every major data breach settlement in recent years has played out, and looking at recent precedent gives a much clearer picture of what to expect than the headline numbers do.
The Equifax breach in 2017 exposed roughly 147 million people and resulted in a $700 million global settlement — at the time the largest in US history. The widely advertised headline allowed claimants to seek up to $20,000 for documented losses. In practice, the flat cash payments most people actually received without detailed documentation worked out to roughly $5 to $10 per person, because so many people filed claims against a fund that had to stretch across the entire affected population.
T-Mobile's 2021 breach, which exposed about 76 million customers, led to a $350 million settlement. Customers without documented losses ultimately received payments ranging from $25 up to $100 depending on residency, and many recent reports show actual deposits landing closer to $25 to $375 once the fund was divided among everyone who filed.
The pattern is consistent. The bigger and more publicized number is the total settlement pool, not what any individual person walks away with. The actual per-person payout depends heavily on how many of the millions of eligible people in the class actually bother to file a claim. Historically, a large share of eligible claimants never file at all — which is good news for those who do, since it means a larger slice of the fund per claimant, but bad news for anyone expecting a windfall based on the $117.5 million headline figure.
What You Should Do Beyond Filing a Claim
Given the specific information exposed in this breach — passwords, dates of birth, and partial Social Security numbers — filing for settlement money shouldn't be the only step affected customers take.
Change your Xfinity password immediately if you haven't already, and avoid reusing that same password anywhere else, since exposed login credentials are frequently tested against other accounts in what's known as credential stuffing. Consider placing a free credit freeze with the three major credit bureaus — Equifax, Experian, and TransUnion — since even partial Social Security number exposure can be combined with other leaked data to attempt identity theft. Monitor your bank and credit card statements for unfamiliar activity over the coming months, since stolen data sometimes surfaces and gets used well after the original breach.
What Happens Next
A final approval hearing for the settlement is scheduled for July 7. Payments are expected to begin going out sometime after that hearing concludes, though as with most class action settlements of this size, the exact timeline for when checks or deposits actually arrive tends to stretch out over additional weeks or months after approval.
The claims deadline for both the documented-loss option and the flat $50 alternative payment is August 14.
Curious for more stories that keep you informed and entertained? From the latest headlines to everyday insights, YourLifeBuzz has more to explore. Dive into what’s next.