The Deadline To Claim Part of Comcast’s $117.5M Data Breach Settlement Has Been Extended

If you’re a current or former Xfinity user, there’s still time to file a claim in a $117.5 million class-action settlement its parent company, Comcast, agreed to after a cybersecurity attack exposed personal information belonging to nearly 36 million customers.

Comcast agreed to the settlement in January and the deadline to file a claim was initially Aug. 14. But it’s now been extended to Sept. 14, 2026.  

According to court filings, the breach occurred sometime between Oct. 16 and Oct. 19, 2023, exposing usernames, contact information, dates of birth, passwords, partial Social Security numbers and even security questions belonging to an estimated 35.8 million customers. The plaintiffs alleged Comcast’s “inadequate” data security protocols “failed to properly protect personal information in accordance with its duties.”

The telecom giant denied any wrongdoing but agreed to the multi-million-dollar settlement, as well as to providing free identity theft protection services to affected customers for three years. Comcast did not respond to a request for comment.

Xfinity was launched in 2010 as Comcast’s rebranded cable, internet, telephone and wireless service. CNBC was a subsidiary of Comcast until Jan. 2, 2026, when it and other cable networks were officially spun off into Versant Media Group.

Find out what you need to know about the Comcast class-action settlement — including who qualifies, how much money you could receive and when it will be sent out — and how you can help protect your data from cyberattacks.

Find identity theft protection that’s right for you

Not every Xfinity or Comcast customer qualifies for a payment from the settlement. Eligible individuals should have received a notice from Comcast in Dec. 2023 that included a unique settlement member ID number. 

If you didn’t receive notification or aren’t sure if you qualify, you can see if you’ve been assigned a settlement member ID number here.

Xfinity users who can document financial losses directly linked to the breach can submit a claim for reimbursement of up to $10,000. Otherwise, they can elect for an alternative cash payment of $50.

You may also be able to claim up to $150 for time spent addressing ID theft or preventative measures.

In all cases, the final dollar amount will be impacted by the total number of claims received. In addition, close to $40 million of the settlement has been earmarked for attorneys’ fees.

Once those are paid, the remaining settlement money will be divided among settlement members who submitted on-time claims. 

A final approval hearing was originally scheduled for July 7 but has been moved to Aug. 5, 2026. Payments should start being issued after that, but appeals may slow the process. 

New claims will continue to be processed through Sept. 14, 2026, and payments issued accordingly.

To file a claim, you’ll need your unique Class Member ID, which was provided in email and mail notifications sent to affected customers. If you cannot find your ID or aren’t sure you were assigned one, you can look it up here.

The deadline to submit an online claim form at the settlement website is 11:59 pm ET on Sept. 14, 2026. You can also file via mail by downloading and completing a paper Claim Form. The form must be postmarked by  Sept. 14, 2026.

Eligible class members can claim the following benefits:

• Out-of-pocket losses: Up to $10,000 in reimbursements for documented expenses relating to identity theft repair, such as legal fees, credit monitoring, and credit freezes.
• Lost time: $30 per hour for up to five hours of time spent addressing ID theft or preventative measures.
• Alternative cash payment: An estimated $50 payout for members who do not have documented out-of-pocket losses. 

The deadline to request to object to the settlement or request to be excluded was July 1, 2026.

Whether you’re eligible for the Comcast settlement or not, keeping on top of identity theft is critical. According to the Federal Trade Commission, more than 6.4 million identity theft and fraud cases were reported in 2024, with a median loss of nearly $500 per victim.

If you suspect your data has been compromised: 

• Review your statements for suspicious activity and notify your bank and credit card providers that your data may have been exposed.
• Register fraud alerts with Experian, Equifax and TransUnion, the three main credit reporting bureaus.
• Consider freezing your credit to prevent new accounts from being opened in your name.
• If you are the victim of identity theft, report it to the Federal Trade Commission and local law enforcement.
• Keep records of all communications and fraudulent transactions.   

There are some proactive measures you can take, however, like using a password manager. Services like Keeper and Dashlane store your usernames, passwords and email addresses, and provide dark web monitoring, email masking and other benefits.

Even if you’re not impacted by the Comcast breach, freezing your credit reports will prevent anyone from opening a new account in your name. There is no effect on your credit score or existing accounts and you can unlock your accounts when you want to apply for a credit card or loan or sign a lease.

Identity monitoring service Aura can freeze your credit and provide a range of other security features, including a password generator, email aliases, a VPN, robocall filters and malware protection. 

Comcast is just one of many companies that’s fallen prey to hackers. In Q1 of 2026 alone, the Identity Theft Resource Center was notified about 780 major data compromises, impacting nearly 140 million victims.

Online insurance company Lemonade agreed to a $10.5 million settlement stemming from a breach that exposed the driver’s licenses and other personal info belonging to nearly 200,000 customers. Last year, AT&T paid out $177 million after a series of breaches impacting 73 million past and current customers.

Most identity theft strategies, like checking your credit report, rely on detecting fraud after it has already occurred. According to the Consumer Financial Protection Bureau, you should check your credit reports at least once a year, but reviewing them monthly will help you spot identity theft more quickly. 

• Most credit card companies and banks provide customers with updated credit score information for free.
• You can get free copies of your reports from each of the three major bureaus at AnnualCreditReport.com.
• You can get a free credit report from Experian every 30 days and CreditWise from Capital One provides free access to your TransUnion credit report. Equifax offers two free credit reports per year with myEquifax.
• For regular updates on all three reports, consider subscribing to a paid identity theft protection service like PrivacyGuard® or Experian IdentityWorks℠. 

At CNBC Select, our mission is to deliver high-quality service journalism and comprehensive consumer advice to our readers, enabling them to make informed financial decisions. Every cybersecurity article is based on rigorous reporting by our team of expert writers and editors. While CNBC Select earns a commission from affiliate partners on many offers and links, we create all our content independently of our commercial team and any outside third parties, and we pride ourselves on maintaining high journalistic standards and ethics.