The Comcast Settlement Makes You Choose: the No-Proof $50, or the Documented Claim — and It Pays Whichever Is Larger

Between 16 and 19 October 2023, attackers got into Comcast’s internal systems by exploiting a known vulnerability nicknamed “Citrix Bleed” — a flaw in third-party software Comcast used, not in Comcast’s own product. The resulting class action, Hasson v. Comcast Cable Communications LLC, has settled for $117.5 million.

The claim window is open until 14 September 2026. And the number almost every article leads with is the smallest one available to you.

What You Can Actually Claim — It Is a Fork, Not a Menu

This is where nearly every write-up goes wrong, including an earlier version of this one. There are two routes, and you take one.

The $10,000 headline is also worth deflating. It is reachable essentially only through documented out-of-pocket losses — identity theft repair, legal fees, credit monitoring you paid for, credit freezes. The lost-time component tops out at $150 no matter how many hours you spent, so nobody is reaching $10,000 on time alone.

The Free Identity Protection Is Automatic — But You Still Have to Switch It On

There is a third benefit that is not a cash tier and not an either/or, and it is the one class members overlook most.

Every class member gets three years of identity protection — credit monitoring, dark web monitoring and up to $1 million in identity theft insurance. The important detail: there is no box for it on the claim form, and people go looking for one. It is an automatic benefit. An individualised enrolment code was included in the notice email or letter sent to each class member, and you redeem it at app.financialshield.com/enrollment/activate/comcastfs.

The code only activates once the settlement becomes final, so it is not something you can use today — keep it somewhere you will find it again. Taking the monitoring does not reduce your cash payment. Given that the cash is likely to be a modest sum, the monitoring is arguably the more valuable half of what is on offer.

Why the $50 Is an Estimate That Can Move Up or Down

The figure is described as estimated and subject to pro rata adjustment. That adjustment runs in both directions: the per-person amount falls if a very large number of valid claims arrive, and rises if relatively few do.

The settlement class is roughly 31.7 million people who were sent individual notice. (You will also see 35.8 million quoted — that is the number whose data was exposed in the intrusion, which is a different and larger group than the class.) Class counsel will seek fees of up to a third of the $117.5 million fund. What remains is divided among everyone who files — and because only a fraction of a class this size ever files, $50 is not automatically a ceiling.

None of that is a reason to skip it. It is a reason not to plan around a specific number.

Are You Eligible?

You are in the class if you are a current or former Xfinity customer residing in the United States or its territories who received a notification email or letter in December 2023 containing a unique Settlement Class Member ID.

The territories are not a footnote. The class is defined as “all persons residing in the United States and its territories” who were sent individual notice, so Puerto Rico, Guam, the US Virgin Islands and American Samoa are inside the class. Coverage that shortens this to “the United States” reads as an exclusion to the people it affects most.

In practice that means people who had Xfinity internet, cable or phone service around October 2023 — including those who have since cancelled. Leaving Comcast does not remove you from the class.

Who is carved out: Comcast employees, the judges presiding over the case, anyone who opted out by 1 July 2026, and certain people with pending arbitration claims.

You Almost Certainly Deleted the Email. That Is Fine.

This is the practical blocker, and it stops more people than eligibility does. The notice went out in December 2023 — nearly three years ago. Almost nobody still has it.

Why You Will See Two Different Deadlines

If you search this, you will find pages saying the deadline is in August and others saying September. Both were true at different times: the deadline was extended, and the current date is 14 September 2026.

The exclusion and objection deadline has already gone — that was 1 July 2026. Filing a claim is still open.

Filing now is not the same as being paid now. The Final Approval Hearing was held on 5 August 2026, and as of this update no final approval order has been posted by the administrator. Nothing is distributed until the court grants final approval and any appeal period has run out, and the identity protection enrolment codes only switch on at that same point. File before 14 September, then expect to wait.

How to File

• Go to ComcastBreachSettlement.com.
• If you do not have your Settlement Class Member ID, use the ID Look Up form first.
• Choose either the alternative cash payment (approx. $50, no proof) or the documented route (out-of-pocket losses and/or lost time). The claim form does not allow both. If you have any lost time to self-certify, use the documented route — the settlement pays the greater of the two, so you cannot end up below $50.
• If you did have real expenses from identity theft, gather the documents — dated 16 October 2023 or later, and not self-prepared — and claim under out-of-pocket losses, up to $10,000.
• Do not go looking for the identity protection on the claim form. It is not there. Redeem the enrolment code from your notice at app.financialshield.com/enrollment/activate/comcastfs after the settlement is final.
• Do not pay anyone to file. It is free.

Frequently Asked Questions (FAQ)

Corrected 8 August 2026: an earlier version stated the $50 alternative cash payment could be claimed in addition to the $150 lost-time benefit. The court notice makes it an alternative to the documented claim, and the page has been rewritten. Updated 9 August 2026: the “How to File” checklist still told readers to take both routes and has been corrected; the class now correctly includes the US territories; the identity protection is automatic rather than claimed on the form; the 16 October 2023 expense cut-off and the receipt rule have been added; and the pro rata note now reflects that the estimate can move up as well as down. Settlement value of $117.5 million, the case name Hasson v. Comcast Cable Communications LLC, the October 2023 “Citrix Bleed” intrusion, the December 2023 notice and Settlement Class Member ID, the class definition covering persons residing in the United States and its territories, the 14 September 2026 claim deadline and its extension, the 1 July 2026 exclusion deadline, the 5 August 2026 Final Approval Hearing, the $50 alternative cash payment and its pro rata adjustment, the “greater of” rule, the $30-per-hour lost time benefit capped at five hours, the $10,000 out-of-pocket cap, the 16 October 2023 expense cut-off and the self-prepared receipt rule, the automatic Identity Defense enrolment code and its activation address, the ID Look Up form and the official settlement website per the settlement administrator’s FAQ and the court-authorised notice, with additional reporting by CNBC Select, PhillyVoice and Top Class Actions, 2026. Comcast has agreed to settle; a settlement is not an admission of liability. Amounts described as estimated may change depending on the number of valid claims, and terms can be altered by order of the court — check the official settlement site before relying on anything here. This is general information, not legal advice. Photo: a data centre server room by BalticServers.com, CC BY-SA 3.0 via Wikimedia Commons, cropped — illustrative, not a Comcast facility.