The Deadline To Claim Part of Comcast's $117.5M Data Breach Settlement Has Been Extended

If you’re a current or former Xfinity user, there's still time to file a claim in a $117.5 million class-action settlement its parent company, Comcast, agreed to after a cybersecurity attack exposed personal information belonging to nearly 36 million customers.

Comcast agreed to the settlement in January and the deadline to file a claim was initially Aug. 14. But it’s now been extended to Sept. 14, 2026.

According to court filings, the breach occurred sometime between Oct. 16 and Oct. 19, 2023, exposing usernames, information, dates of birth, passwords, partial Social Security numbers and even security questions belonging to an estimated 35.8 million customers. The plaintiffs alleged Comcast’s “inadequate” data security protocols “failed to properly protect personal information in accordance with its duties.” The telecom giant denied any wrongdoing but agreed to the multi-million-dollar settlement, as well as to providing free identity theft protection services to affected customers for three years. Comcast did not respond to a request for .

Xfinity was launched in 2010 as Comcast’s rebranded cable, internet, telephone and wireless service. CNBC was a subsidiary of Comcast until Jan. 2, 2026, when it and other cable networks were officially spun off into Versant Media Group.

Find out what you need to know the Comcast class-action settlement — including who qualifies, how much money you could receive and when it will be sent out — and how you can help protect your data from cyberattacks.

Not every Xfinity or Comcast customer qualifies for a payment from the settlement. Eligible individuals should have received a notice from Comcast in Dec. 2023 that included a unique settlement member ID number.

If you didn’t receive notification or aren’t sure if you qualify, you can see if you’ve been assigned a settlement member ID number here .

Xfinity users who can document financial losses directly linked to the breach can submit a claim for reimbursement of up to $10,000. Otherwise, they can elect for an alternative cash payment of $50.

You may also be able to claim up to $150 for time spent addressing ID theft or preventative measures.

In all cases, the final dollar amount will be impacted by the total number of claims received. In addition, close to $40 million of the settlement has been earmarked for attorneys' fees.

Once those are paid, the remaining settlement money will be divided among settlement members who submitted on-time claims.

Offers in this section are from affiliate partners and selected based on a combination of engagement, product relevance, compensation, and consistent availability.

A final approval hearing was originally scheduled for July 7 but has been moved to Aug. 5, 2026. Payments should start being issued after that, but appeals may slow the process.

New claims will continue to be processed through Sept. 14, 2026, and payments issued accordingly.

To file a claim, you’ll need your unique Class Member ID, which was provided in email and mail notifications sent to affected customers. If you cannot find your ID or aren’t sure you were assigned one, you can look it up here .

The deadline to submit an online claim form at the settlement website is 11:59 pm ET on Sept. 14, 2026. You can also file via mail by downloading and completing a paper Claim Form. The form must be postmarked by Sept. 14, 2026.

Eligible class members can claim the following benefits:

The deadline to request to object to the settlement or request to be excluded was July 1, 2026.

Offers in this section are from affiliate partners and selected based on a combination of engagement, product relevance, compensation, and consistent availability.

Whether you're eligible for the Comcast settlement or not, keeping on top of identity theft is critical. According to the Federal Trade Commission, more than 6.4 million identity theft and fraud cases were reported in 2024, with a median loss of nearly $500 per victim. If you suspect your data has been compromised:

There are some proactive measures you can take, however, like using a password manager. Services like Keeper and Dashlane store your usernames, passwords and email addresses, and provide dark web monitoring, email masking and other benefits.

Keeper Free: $0; Keeper Unlimited: $3.58 per user per month; Keeper Family: $7.67 per month; Business plan: $2.00 to $6.00 per month

Allows importing from other password managers, adjusts auto-fill preferences for individual websites and allows for one-time password sharing

Available for web, desktop, and mobile devices.

Uses a zero-knowledge approach, government-standard AES-256 encryption, supports multi-factor authentication and biometrics, and performs quarterly third-party security penetration testing

Premium: $5.42 per month, includes VPN; Friends & family: $8.13 per month; Business plan: $8.00 per month; All prices are per month with annual billing selected

The premium plan provides access to VPN, password health checker, dark web monitoring and allows you to securely store sensitive documents.

Available for web and mobile devices.

Uses a zero-knowledge approach, government-standard AES-256 encryption, multi-factor authentication, support for biometrics and has passed third-party security audits.

Even if you're not impacted by the Comcast breach, freezing your credit reports will prevent anyone from opening a new account in your name. There is no effect on your credit score or existing accounts and you can unlock your accounts when you want to apply for a credit card or loan or sign a lease.

Identity monitoring service Aura can freeze your credit and provide a range of other security features, including a password generator, email aliases, a VPN, robocall filters and malware protection.

Kids: $13 per month or $10 per month billed annually; Individual: $15 per month or $12 per month billed annually; Couple: $29 per month or $22 per month billed annually; Family: $50 per month or $32 per month billed annually

Protects against identity theft, fraud, spam calls and websites, viruses and malware. Offers three credit bureau monitoring, VPN, dark web monitoring, password manager, email aliases and instant credit lock.

All plans include at least $1 million and white-glove fraud remediation

Comcast is just one of many companies that's fallen prey to hackers. In Q1 of 2026 alone, the Identity Theft Resource Center was notified 780 major data compromises, impacting nearly 140 million victims. Online insurance company Lemonade agreed to a $10.5 million settlement stemming from a breach that exposed the driver’s licenses and other personal info belonging to nearly 200,000 customers. Last year, AT&T paid out $177 million after a series of breaches impacting 73 million past and current customers. Most identity theft strategies, like checking your credit report, rely on detecting fraud after it has already occurred. According to the Consumer Financial Protection Bureau, you should check your credit reports at least once a year, but reviewing them monthly will help you spot identity theft more quickly.

$9.99 to $24.99 per month

Experian, Equifax and TransUnion

Yes, for Identity and Total Protection plans

Yes, up to $1 million for Identity and Total Protection plans

Basic: Free; Premium: 7-day trial, after $24.99 per month; Family: 7-day trial, after $34.99 per month

1-bureau credit monitoring, alerts and reports: Experian, with Basic plan only and 3-bureau credit monitoring, alerts and reports: Experian, Equifax and TransUnion®, with Premium and Family plans only

FICO® Score 8, with all plans

Yes, up to $1 million with all plans

*Identity Theft Insurance underwritten by insurance company subsidiaries or affiliates of American International Group, Inc. (AIG). The description herein is a summary and intended for informational purposes only and does not include all terms, conditions and exclusions of the policies described. Please refer to the actual policies for terms, conditions, and exclusions of coverage. Coverage may not be available in all jurisdictions.

Xfinity customers with documented financial losses directly linked to the breach can file a claim for reimbursement of up to $10,000. Otherwise, you can elect for a flat cash payment of $50.

If you can document time spent addressing identity theft or taking preventive measures, you can also file a claim for $30 per hour (up to 5 hours). Close to $40 million of the settlement has been earmarked for attorneys' fees, so the final payout to class members may be adjusted depending on how many claims are filed.

You are eligible for the Comcast settlement if you are a current or former Xfinity customer in the U.S. who received a notification email or letter in December 2023 that included a unique settlement member ID.

If you're not sure if you received notification, you can look up your settlement member ID number here .

A final approval hearing has been set for Aug. 5, 2026. Even if the Court approves the settlement, however, there may be appeals that delay payouts. Qualified class action members have until Sept. 14, 2026 to submit their claims.

At CNBC Select, our mission is to deliver high-quality service journalism and comprehensive consumer advice to our readers, enabling them to make informed financial decisions. Every cybersecurity article is based on rigorous reporting by our team of expert writers and editors. While CNBC Select earns a commission from affiliate partners on many offers and links, we create all our content independently of our commercial team and any outside third parties, and we pride ourselves on maintaining high journalistic standards and ethics.