Comcast Xfinity data breach settlement: $50 flat or up to $10,000 documented

Roughly 36 million Comcast Xfinity customers had names, contact details, dates of birth, partial Social Security numbers, and security questions exposed in the October 2023 'Citrix Bleed' breach. Comcast's $117.5 million settlement pays every valid claimant a flat cash payment of about $50 with zero documentation — and up to $10,000 if you can document out-of-pocket losses or lost time. Claims are due September 14, 2026.

What happened

In Hasson v. Comcast Cable Communications (E.D. Pa.), plaintiffs alleged Comcast failed to patch the widely publicized Citrix Bleed vulnerability, letting attackers access customer data between October 16 and 19, 2023. Breach notices went out to affected customers around December 18, 2023.

Who qualifies and how much

You qualify if your personal information was compromised in the breach — in practice, if you received (or were entitled to receive) one of the December 2023 notices. Two tiers: a flat payment of about $50 (subject to pro-rata adjustment based on take-up) with no paperwork, or documented reimbursement up to $10,000 for out-of-pocket losses and lost time. Identity protection services are included either way.

How to file — and a deadline warning

The claim deadline is September 14, 2026 — note that some press coverage reported August 14 in error; the official site controls. ClaimBridge finds it, lays out what registering takes, and readies your registration as a class member — you finish it in minutes and keep 100% of the payout. The official settlement site is comcastbreachsettlement.com. If you have fraud losses traceable to late 2023, gather the records — the $10,000 tier is where breach settlements actually pay.