A federal judge in the Eastern District of Pennsylvania granted final approval to a $117.5 million settlement over Comcast’s October 2023 data breach on August 20, and that approval carries a hard stop: the deadline to file a claim closes September 14, just six days after this article publishes. The settlement covers Xfinity customers who received a notice around December 18, 2023, informing them that an intruder had accessed their personal information. The money has already been set aside by court order; the only thing standing between an eligible customer and a payment is the calendar.
The October 2023 Breach Behind the Fund
In October 2023, a third party gained unauthorized access to Comcast’s internal systems over a four-day window between October 16 and October 19, exposing personal information tied to customer accounts across the company’s Xfinity service. Comcast notified affected individuals of the intrusion on or around December 18, 2023, and that mailing date is now the dividing line the settlement uses to define class membership: anyone who received that notice, rather than anyone merely present in Comcast’s systems during the breach window, is eligible to file a claim.
The case, formally styled Hasson v. Comcast Cable Communications, LLC, proceeded in the U.S. District Court for the Eastern District of Pennsylvania under case number 2:23-cv-05039-JMY. Comcast has not admitted wrongdoing anywhere in the settlement, and the company continues to deny that it violated any law; the agreement resolves the litigation without a court ruling on the underlying allegations. To close the case, Comcast agreed to fund a $117,500,000 settlement pool covering class member payments, identity protection services, notice and administrative costs, attorneys’ fees, and a service award, all subject to the court’s oversight and approval.
The court held a final approval hearing on August 5, 2026, then issued its order approving the settlement on August 20, closing out roughly two and a half years of litigation. That approval order is the document now controlling how money moves out of the fund, and it locked in the current claims deadline after the administrator had already pushed the original cutoff back once, from an earlier August date to the September 14 date now in effect.
Free retirement updates: Miss an enrollment or claim deadline and it may be gone. Our free Retirement Shield newsletter keeps readers ahead of the ones that matter. Get the free newsletter.
How the September 14 Claims Window Works
A class member who wants a payment has to act before the deadline through one of two channels: submitting a claim electronically through the settlement website by 11:59 p.m. Eastern time on September 14, or mailing a paper claim form postmarked no later than that date. The settlement’s FAQ page makes clear the deadline is not a soft target the administrator can waive on request — it is fixed by the court’s approval order, and Kroll Settlement Administration, the firm handling claims, processes payments only for forms that clear one of those two paths on time.
The settlement gives class members a choice between two categories of payment. One path reimburses documented losses tied to the breach — expenses connected to repairing identity theft, replacing compromised accounts, or time spent dealing with the aftermath — with records submitted alongside the claim form to support the amount requested. The other path is a simpler alternative payment for class members who would rather not assemble documentation, trading a potentially larger reimbursement for a faster, more certain outcome once the fund finishes processing every claim submitted before the cutoff.
Separately from the cash claims process, every class member already holds a benefit that does not require filing anything: an enrollment code for identity defense and restoration services that activates once the settlement becomes final and effective. That protection runs independent of the money, which means a customer who lets the September 14 deadline pass without filing a claim still keeps access to monitoring tied to their account — the thing forfeited by inaction is the cash payment, not the protective service.
What Happens to Anyone Who Misses the Cutoff
Every class member who did not request exclusion by the settlement’s earlier opt-out deadline in July is bound by its terms whether or not a claim is ever filed. That means a customer who ignores the September 14 date keeps the identity defense benefit but permanently gives up the ability to sue Comcast separately over the 2023 breach, and loses any claim to the cash portion of the fund that was set aside specifically to compensate class members for that harm.
The settlement’s administrative machinery keeps moving after the claims window closes. Attorneys’ fees, litigation costs, and a service award to the plaintiff who brought the case still required separate court authorization, and individual payment amounts to class members who filed on time are not calculated until the total number of valid claims is known. That means a person who files on September 13 will not learn the exact size of a payment on that date — the administrator has to tally every claim first before dividing what remains of the fund among everyone who qualified.
For anyone who received Comcast’s breach notice in December 2023, the practical test now is straightforward: confirm eligibility on the settlement website, decide which of the two payment paths fits, and submit before the deadline expires. Once September 14 passes, the fund’s process shifts entirely toward finalizing the claims already on file rather than accepting new ones, and a missed window in a settlement of this size — negotiated over more than two years — rarely reopens for stragglers.
This article was drafted with AI assistance and edited for accuracy.
More Financial Reading
