Comcast has agreed to a $117.5 million class action settlement following a 2023 cybersecurity incident that exposed sensitive customer information.
The proposed settlement stems from a lawsuit filed after an October 2023 cyberattack in which unauthorized parties accessed sensitive customer data. The case, formally known as Hasson v. Comcast Cable Communications LLC, is being handled in the US District Court for the Eastern District of Pennsylvania.
According to court documents and the official settlement notice, the breach involved a third party gaining access to customers’ personal information. Those affected were notified around Dec. 18, 2023.
Plaintiffs in the case alleged that Comcast failed to adequately protect user data, citing insufficient security measures and improper handling of the incident. Comcast, however, “denies that it engaged in any wrongdoing or violated any law,” according to the official settlement notice.
Who qualifies and what they could receive
The settlement covers US customers who received a breach notification in Dec. 2023. Estimates suggest that more than 30 million people may have been affected.
Eligible claimants have several compensation options. Those who can document financial losses tied to the breach, such as fraud, identity theft, or related expenses, may receive reimbursements of up to $10,000. This includes costs such as credit monitoring, banking fees, and expenses incurred in addressing identity misuse.
Additionally, individuals can claim compensation for time spent dealing with the fallout, capped at five hours and calculated at $30 per hour.
For those without documentation, an alternative payment option is available for an estimated $50, though the final amount may vary based on the number of claims filed.
Beyond cash payouts, the settlement also includes identity protection benefits. Class members are entitled to enroll in identity defense and restoration services, including credit monitoring and insurance coverage for identity theft.
Key deadlines and legal options
Customers who wish to receive compensation must submit a claim by Aug. 14, 2026. Claims can be filed online or by mail through the settlement administrator.
Other important deadlines shape how customers can respond. Those who want to opt out of the settlement and retain the right to pursue their own legal action must do so by June 1, 2026. The same deadline applies for filing objections to the settlement terms.
A final approval hearing is scheduled for July 7, 2026, where a judge will determine whether the agreement is “fair, reasonable, and adequate,” as previously described in preliminary approval proceedings.
The $117.5 million fund is designed to cover a range of costs beyond customer payouts. These include administrative expenses, legal fees, and service awards for class representatives. The remaining funds will be distributed among approved claimants.
Payments will be issued only after the court grants final approval and the claims process is complete.
Also read: A breach exposing 337,000 LAPD-linked records highlights how third-party failures can put sensitive data at risk.
