“When 35 million people’s data gets stolen and the company offers $50 to make it go away, most people shrug and move on. That’s exactly what they’re counting on.”
The claim portal for Comcast’s $117.5 million data breach settlement is now live — and the deadline to file is September 14, 2026. The Krispy Kreme data breach settlement is also accepting claims through June 22, with payouts up to $3,500. If you had Xfinity internet, cable, or phone service in October 2023, even if you’ve since canceled, you’re likely owed money.
I first covered this settlement back in February when it received preliminary court approval. Now the claim forms are open, the deadlines are set, and the opt-out window closes July 1. Here’s exactly how to file before the money runs out.
Data breaches keep hitting different companies the same way. If you worked for Gas Express, the largest Circle K franchisee, there’s a separate employee data breach settlement with a September 3, 2026 deadline worth checking.
What You Need to Know
Between October 16 and 19, 2023, hackers exploited a known vulnerability called “Citrix Bleed” to break into Comcast’s internal systems. Citrix had publicly disclosed the vulnerability on October 10 and released a fix. Comcast says it patched the hole on October 23 — but by then, the damage was done.
The breach exposed personal information belonging to approximately 35,879,455 current and former Xfinity customers, including:
- Usernames and hashed passwords
- Full names and contact information
- Last four digits of Social Security numbers
- Dates of birth
- Secret questions and answers
Comcast didn’t publicly disclose the breach until December 2023 — more than two months after it happened. That’s two months where your compromised data was floating around while you had no idea.
Why this matters if you’re dealing with debt: Stolen personal information — especially partial Social Security numbers, dates of birth, and security questions — is exactly what identity thieves need to open fraudulent accounts in your name. If you’re already struggling with debt, the last thing you need is someone piling fake accounts on top of it. Check your credit reports.
Why You Need to Know It
After 30 years of watching how these settlements play out, I can tell you the pattern: company gets breached, company offers a settlement, most people never file, and the company writes off the rest.
Here’s what Comcast isn’t telling you about this $117.5 million settlement:
That means roughly $71 million is left for 35.9 million eligible people. If everyone filed, you’d get about $2 each. But here’s the thing — most people won’t file. In my experience tracking hundreds of class action settlements, claim rates typically run between 5% and 15%. That’s what makes filing worthwhile.
If you didn’t suffer documented identity theft, you can still claim approximately $50 with no documentation required. If you did suffer identity theft or fraud connected to this breach, you can claim up to $10,000 in documented losses.
Also currently open: the Labcorp $35 million data breach settlement (deadline September 3, 2026) — this one involves medical identity theft risk that can quietly damage your credit report.
The real cost they’re not talking about: The settlement also includes three years of free identity monitoring through CyEx Financial Shield. That’s worth real money — credit monitoring services typically cost $20-30 per month. Three years of monitoring is worth $720-$1,080 at retail. File even if you only want the monitoring.
Things to Consider
Before you file, understand what you’re working with:
Two Paths for Your Claim
No-Documentation Claim (~$50)
- No receipts or proof needed
- Takes about 5 minutes to file
- Best if you haven’t noticed fraud
- Amount may adjust based on how many people file
Documented Losses (Up to $10,000)
- Covers identity theft costs, fraud charges, credit monitoring fees you paid
- Includes lost time: up to 5 hours at $30/hour ($150)
- Requires bank statements, receipts, or police reports
- The $10,000 cap includes both out-of-pocket costs AND lost time
What the Identity Monitoring Includes
Every class member — whether you file a cash claim or not — gets three years of CyEx Financial Shield Complete:
- Single-bureau credit monitoring
- Dark web monitoring for your data
- Real-time authentication alerts
- High-risk transaction monitoring
- Lost wallet protection
- $1 million identity theft insurance policy
You don’t need to file a claim form to get this — but you do need to activate it with the enrollment code they send after the settlement is finalized.
If You Already Paid for Credit Monitoring
If you bought your own credit monitoring service after this breach, those costs are reimbursable as out-of-pocket losses. Dig up those receipts. The same goes for credit freeze fees, identity theft insurance premiums, or any charges related to dealing with the fallout from this breach.
What to Think About Doing
Here’s your action plan — this takes about 10 minutes:
- Step 1: Check your email (including spam folders) for a settlement notice from December 2023 or early 2024. Search for “Comcast” and “data breach” and “settlement.” Your Class Member ID is in that notice.
- Step 2: If you can’t find the notice, visit ComcastBreachSettlement.com and use the ID Look Up Form to check your eligibility. You were an Xfinity customer at any point during October 2023? You’re likely eligible.
- Step 3: Decide which claim path makes sense — the $50 no-documentation claim or the documented losses claim. If you experienced any identity theft or fraud since October 2023, gather your documentation.
- Step 4: File your claim online at ComcastBreachSettlement.com. The online form is faster and you can choose electronic payment instead of waiting for a check.
- Step 5: Mark your calendar — the claim deadline is September 14, 2026. Don’t wait until the last day.
Scam alert: Fraudulent emails are already circulating about this settlement. The only legitimate website is ComcastBreachSettlement.com. Real settlement communications will never ask for an upfront fee, your full Social Security number, or urgent action with a “click now or lose your money” threat. If something feels off, call the settlement administrator directly at 833-319-2401.
Already dealing with debt on top of this? If this data breach led to fraudulent accounts that damaged your credit or added debts you don’t owe, you have rights. Use the free Scam-O-Meter to check any company that contacts you about a debt you don’t recognize, and run any “settlement” offer through the Contract Decoder before signing anything.
Key Deadlines
Key Takeaway
If you were an Xfinity customer in October 2023, Comcast owes you money from their $117.5 million data breach settlement. You can claim approximately $50 with zero documentation, or up to $10,000 if you have proof of identity theft losses. Plus three years of free credit monitoring. The deadline is September 14, 2026 — file now, not later. Visit ComcastBreachSettlement.com.
The case is Hasson v. Comcast Cable Communications LLC, Case No. 2:23-cv-05039-JMY, in the U.S. District Court for the Eastern District of Pennsylvania. The settlement administrator is Kroll Settlement Administration LLC, and they can be reached at 833-319-2401.
If you want to see what other settlements are open right now, I’ve been tracking them — take a look at the latest data breach settlements and the tax implications of settlement checks so you’re not surprised at tax time.
Send this to anyone you know who has or had Comcast. That’s a lot of people — 35 million of them, to be exact.
This is what I’m seeing after tracking class action settlements for decades. It’s one informed perspective — but your situation is yours. Use this as a starting point for your decision, not the final word. Nobody gets to tell you what to do with your money or your data. Not me, not Comcast, not anyone.
Have kids who used Google Play apps? There’s another open settlement worth checking — Google Play Children’s Privacy Settlement: Parents Can Claim a Share of $8.25 Million.
Also currently open: the Labcorp $35 million data breach settlement (deadline September 3, 2026) — this one involves medical identity theft risk that can quietly damage your credit report.
Dealing With Debt? Understanding your options is the first step. See how all your debt relief options compare — including ones most sites won’t tell you about. The Find Your Path quiz gives a recommendation based on your actual numbers, and the Scam-O-Meter checks any company’s complaint history before you sign. Federal Reserve research shows bankruptcy filers recover faster than those who don’t file.
Claiming money you are owed is one good day. What you do over the following year is what actually changes your position.
In the latest issue (Sep 10): Your phone company is supposed to know who’s handing it those scam calls. Some of them don’t bother.
I write Your Money Actually most weekdays — what I am watching in debt and money, and the small decisions that compound. It is free, I sell nothing, and I take no money from any company I write about.
