36 million Xfinity customers' data exposed – how to claim your compensation

Publication Date: 15.04.2026

Rate this article:

4.8/5 ( 91 votes )

Table of Contents:

In 2023, cyber attackers gained access to the personal data of 36 million Xfinity customers. Comcast announced at the time that the exposed data included names, contact information, and dates of birth. Subsequently, a class action lawsuit process began, and a settlement of $117.5 million has now been reached...

Xfinity data breach

The cybersecurity incident dates back to late 2023.

On October 10, 2023, Citrix, one of Xfinity's software providers, announced a security vulnerability in a product used by Xfinity and thousands of other companies worldwide. When Citrix made this announcement, it stated that a patch had been released to fix the vulnerability. Citrix also provided additional precautionary guidance on October 23, 2023. We quickly patched and took precautions on our systems.

However, before taking precautions, we discovered unauthorized access to some of our internal systems between October 16 and October 19, 2023, and determined that this was due to the security vulnerability. We notified federal law enforcement and conducted an investigation into the nature and scope of the incident. It was later determined that information likely obtained included usernames and encrypted passwords. For some customers, additional information such as names, contact information, the last four digits of social security numbers, dates of birth, and/or security questions and answers were also included.

How to claim your compensation

Comcast sent a notification letter to all affected users. If you are one of them, you now have the right to claim your share of the $117.5 million settlement.

You will need the unique settlement member ID number found in the email notifying you of the data breach. If you cannot find that email, you can obtain it by using a query form from here.

Once you have your number, you can submit your claim from here. You have the option to accept a fixed cash amount, expected to be around $50 each, or to request a higher amount by providing evidence of any financial losses and lost time. The total amount of compensation depends on the number of claims submitted.