Comcast customers affected by a 2023 data breach have just days left to file claims in a $117.5 million class-action settlement, and those who miss the August 14 deadline walk away with nothing.
The cable and internet giant agreed to the nine-figure payout to resolve allegations that it failed to put adequate cybersecurity protections in place before hackers accessed customer data over a four-day window in October 2023. Comcast has not admitted wrongdoing. But the settlement fund is real, the clock is running, and eligible customers who received a breach notification letter can file for up to $10,000 in documented out-of-pocket losses, or a flat $50 alternative payment if they have no receipts to show.
The breach itself hit between October 16 and October 19, 2023. Comcast did not publicly disclose it until two months later, in December 2023. The class-action lawsuit followed, accusing the company of leaving customer data exposed through inadequate security. The settlement, first detailed by The Sun, now gives affected customers a narrow window to collect.
The settlement breaks payouts into tiers. Customers who can document losses tied directly to the breach, fraud charges, credit monitoring costs, fees from identity theft, can claim up to $10,000. Those who spent time dealing with the fallout can also seek reimbursement for up to five hours at $30 per hour.
Customers who received a notification letter but cannot point to specific financial harm still qualify for an estimated $50 alternative cash payment. That figure may shift depending on how many people file, but it requires no documentation beyond proof of eligibility.
Every claimant, regardless of tier, also gets three years of identity defense and restoration services through CyEx Financial Shield Complete, including $1 million in identity theft insurance coverage.
Claims can be filed online or by mail through the settlement administrator's website. Customers need their Class Member ID, which appeared on the notification letter Comcast sent after disclosing the breach. Those who lost the letter or never noted the number can look it up through a separate online form hosted by the administrator.
The deadline to file is August 14, 2026. The window to opt out of the settlement or file objections already closed on June 1. Anyone who did not exclude themselves by that date is bound by the settlement's terms, meaning they cannot later sue Comcast separately over the same breach.
Customers with questions can reach the settlement administrator by phone at (833) 319-2401 or through an online contact form.
The timeline raises its own questions. Hackers accessed data during a four-day stretch in mid-October 2023, but Comcast waited until December to tell customers. The lawsuit did not specify what types of personal information were compromised, whether names, Social Security numbers, financial records, or some combination, and the settlement documents referenced in the reporting do not fill that gap.
Comcast serves consumers and businesses nationwide, which means the pool of potentially affected customers could be vast. The settlement does not publicly disclose how many notification letters went out or how many people are eligible to file.
The company agreed to pay $117.5 million without admitting fault, a familiar corporate posture that lets the check clear while the defendant insists nothing went wrong. Customers who lived through the breach and its aftermath may see it differently.
When a company the size of Comcast can sit on a data breach for two months, settle for nine figures, and still deny responsibility, the system is working for someone, just not the customers whose personal information was left exposed.