Comcast has settled a $117.5 million class-action data breach lawsuit, and eligible customers can claim up to $10,000 in compensation before the September 14, 2026 deadline. The settlement stems from a mid-October 2023 security breach where unauthorized third parties accessed customer data through a software vulnerability affecting Xfinity accounts. If you received notice of this breach or are an affected Comcast customer, you have until September 14 to file your claim through the official settlement portal at comcastbreachsettlement.com.
The deadline represents an extension from the original August 14 cutoff, giving affected customers additional time to gather documentation and submit claims. Compensation amounts vary based on what you can prove: customers who document identity theft or fraud losses can receive up to $10,000, while those without specific loss documentation will receive approximately $50. Beyond the cash settlement, all claimants receive three years of free credit monitoring, a benefit designed to help protect against future identity theft related to the breach.
Table of Contents
- WHO QUALIFIES FOR THE COMCAST SETTLEMENT AND HOW MUCH CAN YOU CLAIM?
- UNDERSTANDING THE OCTOBER 2023 DATA BREACH AND ITS SCOPE
- THE SEPTEMBER 14 DEADLINE AND THE EXTENSION THAT SAVED CLAIMS
- HOW TO FILE YOUR COMCAST CLAIM STEP-BY-STEP
- WHAT TO INCLUDE IN YOUR CLAIM AND COMMON MISTAKES
- THE CREDIT MONITORING BENEFIT AND HOW IT PROTECTS YOU
- SETTLEMENT ADMINISTRATOR CONTACT AND CLAIM VERIFICATION
WHO QUALIFIES FOR THE COMCAST SETTLEMENT AND HOW MUCH CAN YOU CLAIM?
The settlement applies to Comcast customers whose data was exposed during the October 2023 breach, but compensation amounts depend entirely on the documentation you can provide. If you experienced identity theft, fraudulent charges, or other financial losses traceable to the breach, you can claim up to $10,000—but you’ll need evidence like credit card statements showing fraudulent transactions, police reports, or other documentation proving your damages. A customer who noticed unauthorized charges on accounts linked to their breached Comcast information, for instance, would compile credit statements and bank records showing those specific fraudulent transactions to support a claim in the higher compensation bracket.
For customers who didn’t experience documented losses, the settlement still provides compensation of approximately $50 per person without requiring proof of specific harm. This base amount reflects the settlement’s acknowledgment that the breach itself created risk and inconvenience, even if your data wasn’t actively misused. The amount isn’t substantial, but it represents compensation for the time spent monitoring accounts and the underlying exposure created by the vulnerability, regardless of whether you ever saw fraudulent activity on your accounts.
UNDERSTANDING THE OCTOBER 2023 DATA BREACH AND ITS SCOPE
The breach occurred in mid-October 2023 when an unauthorized third party exploited a software vulnerability to gain access to Comcast customer information. This wasn’t a case of stolen credentials or weak passwords—the attackers found a technical weakness in Comcast’s systems and used it to access data without customer action. The vulnerability affected customer names, addresses, phone numbers, email addresses, and in some cases, financial information tied to accounts, which is why the company settled for such a substantial amount and made the breach notification to affected customers.
One important limitation: the settlement doesn’t provide compensation for general identity monitoring or credit report freezes you may have already purchased yourself after learning about the breach. The $50 base payment doesn’t reimburse for additional protective services you took independently, only the core settlement compensation and the new three-year free monitoring going forward. If you spent money on credit monitoring services between October 2023 and now while awaiting the settlement, those costs typically won’t be reimbursed through this process, so you should review what services you’re already paying for and what the free monitoring will actually cover.
THE SEPTEMBER 14 DEADLINE AND THE EXTENSION THAT SAVED CLAIMS
The original deadline for filing claims was August 14, 2026, but the settlement administrator extended it to September 14, 2026—giving customers who missed the first cutoff an additional month to locate documentation and submit their claims. If you received a notice about this settlement in early summer 2026, you still have time to act, but the deadline is firm. After September 14, the settlement administrator stops accepting new claims, and any unclaimed portion of the $117.5 million is typically distributed to state attorneys general or charities—not returned to customers.
The extension demonstrates how tight these deadlines can be when coordinating claims across millions of potentially affected customers. A person who needed time to locate old credit card statements showing fraudulent charges, request documentation from their bank, or gather proof of identity theft had a narrow window before august 14, and the one-month extension provided crucial additional time. Many people simply forget about settlement deadlines because they arrive years after the original incident, so marking your calendar and filing before September 14 is essential to actually receiving compensation rather than letting your share revert to unclaimed funds.
HOW TO FILE YOUR COMCAST CLAIM STEP-BY-STEP
To file your claim, go to comcastbreachsettlement.com and enter your information to verify your eligibility as a customer affected by the October 2023 breach. The portal will guide you through the claim process, asking for details about documented losses if you’re claiming the higher compensation tier. You’ll need basic information like your account number, email address, or phone number associated with your Comcast account, along with any supporting documentation such as credit card statements, bank records, or identity theft reports.
If you experience issues navigating the portal or have questions about what documentation to submit, you can contact the settlement administrator Kroll directly at (833) 319-2401. Kroll handles the day-to-day administration of the settlement, processes claims, verifies eligibility, and disburses payments, so they’re the official point of contact if you need guidance on your specific situation. Submitting through the automated portal is faster, but calling Kroll is appropriate if you have unusual circumstances, complex documentation, or technical issues accessing comcastbreachsettlement.com.
WHAT TO INCLUDE IN YOUR CLAIM AND COMMON MISTAKES
Documentation is everything when claiming the higher compensation amounts. If you’re seeking the full $10,000, gather copies of credit card statements showing fraudulent transactions, bank statements documenting unauthorized charges, copies of dispute letters you filed with your financial institutions, police reports if you filed fraud reports, and any credit monitoring alerts or credit bureau correspondence related to unauthorized accounts opened in your name. Submit clear, legible copies (photos or scans are fine) showing the fraud dates, amounts, and the connection to your Comcast account or the data exposed in the breach.
A common mistake is submitting incomplete documentation and hoping the settlement administrator will contact you for clarification. Once you submit your claim, follow up on any requests from Kroll for additional information within the timeframe they specify—ignoring follow-up requests can result in your claim being denied or reduced to the $50 base payment. Another pitfall is waiting until September 10 or 11 to file, leaving no buffer for technical issues with the portal, website outages, or delays in submitting supporting documents. Claim your compensation well before the September 14 deadline to avoid losing your opportunity entirely due to last-minute problems.
THE CREDIT MONITORING BENEFIT AND HOW IT PROTECTS YOU
Beyond the cash payment, all settlement recipients get three years of free credit monitoring through the settlement. This service monitors your credit report for suspicious activity, alerts you to new accounts opened in your name, and tracks inquiries into your credit profile—essentially providing ongoing protection against identity theft related to the data that was exposed. The credit monitoring benefit applies regardless of whether you receive $10,000, $50, or any amount in between; it’s an automatic inclusion for all valid claimants.
Three years is longer than typical post-breach credit monitoring offers, which often last one or two years. This extended window acknowledges that identity theft can surface months or years after a breach, giving you more time to catch fraudulent activity before it spirals. If you’ve already been enrolled in credit monitoring through Comcast’s own notification efforts, verify that this settlement monitoring doesn’t duplicate coverage you’re already receiving, since some households consolidate services to avoid overlap.
SETTLEMENT ADMINISTRATOR CONTACT AND CLAIM VERIFICATION
The Kroll settlement administrator manages all aspects of this settlement, from eligibility verification to payment distribution. You can reach Kroll at (833) 319-2401 if you need to verify whether your Comcast account is covered, request a claim status update, or ask whether your documentation is sufficient for the $10,000 claim tier.
The settlement portal at comcastbreachsettlement.com is the preferred method for filing, but Kroll’s phone line serves customers who need personalized assistance or whose circumstances don’t fit the standard online process. Payment distribution typically occurs within 90 days of claim approval, though timing can vary depending on the volume of claims being processed and whether your documentation requires verification. Once you receive your compensation, that portion of the $117.5 million settlement has been distributed to you—the settlement doesn’t roll over or provide ongoing payments, just a one-time compensation amount based on your eligibility and documented losses.