Comcast Xfinity Data Breach

About this settlement

In Hasson v. Comcast Cable Communications, plaintiffs alleged Comcast failed to patch the 'Citrix Bleed' vulnerability, exposing names, contact details, dates of birth, partial Social Security numbers and security Q&A data for roughly 36 million Xfinity customers between October 16–19, 2023. The $117.5 million settlement offers a flat cash payment (about $50, subject to pro-rata adjustment), reimbursement of up to $10,000 for documented out-of-pocket losses and lost time, and identity protection services. Breach notices went out around December 18, 2023. The claim deadline is September 14, 2026 (the official site controls; some press reported August 14 in error). ClaimBridge readies your registration as a class member and tracks it through payment. What you can claim: about $50 with no paperwork whatsoever, or — if the breach actually cost you money — reimbursement of documented out-of-pocket losses plus lost time at $30 an hour for up to five hours, the two together capped at $10,000. You are paid whichever is greater, so putting in a documented claim can never leave you worse off than the $50. Every class member also gets three years of CyEx Financial Shield Complete without claiming it. The documentation has to come from someone else — credit card statements, bank statements, invoices, telephone records, receipts; the administrator says handwritten or self-prepared receipts are "by themselves, insufficient." All payments, including the $50, move up or down proportionally against the $117.5 million fund depending on how many people claim.

Who is eligible?

• You were a Comcast Xfinity customer whose personal information was compromised in the October 2023 data breach.
• You received (or were entitled to receive) a breach notification mailed around December 18, 2023.
• Documented out-of-pocket losses or lost time qualify for larger reimbursement tiers.