Data Breach Settlements: AT&T, Comcast, and Kaiser Payouts

If you were caught in a recent corporate data breach, there is a good chance a class action settlement is either paying claims now or accepting them through 2026. Active data breach settlements from Comcast, AT&T, 23andMe, Kaiser Permanente, and several MOVEit-related defendants offer flat cash payments in the range of roughly $30 to $165, documented-loss reimbursements up to $5,000 or $10,000, and free credit or identity monitoring for those who qualify. Below is what each settlement pays, who is eligible, and when claims are due.

Comcast/Xfinity ($117.5 Million)

Approximately 36 million current and former Xfinity customers whose data was exposed in the October 2023 breach are covered. The exposed information included usernames, hashed passwords, names, contact details, dates of birth, and the last four digits of Social Security numbers.1CNET. Xfinity Data Breach Settlement: What To Know, How To Claim $117 Million

Eligible class members can claim an estimated $50 flat cash payment, or up to $10,000 for documented out-of-pocket losses and lost time. Identity defense services are available to everyone in the class who does not opt out, whether or not they file a claim. The claims deadline is September 14, 2026, and the final approval hearing is set for August 5, 2026. Comcast denies wrongdoing.2Comcast Breach Settlement. Comcast Data Breach Settlement

AT&T ($177 Million)

AT&T’s settlement resolves two 2024 breaches. The first exposed Social Security numbers, birthdates, and passcodes for roughly 7.6 million current and 65.4 million former account holders. The second involved unauthorized downloads of call and text metadata from a cloud platform.3Yahoo Finance. AT&T Data Breach Class Action Settlement

The fund splits into about $149 million for the first breach and $28 million for the second. If you were affected by the first breach, you can claim up to $5,000 in documented losses; the second breach pays up to $2,500. People hit by both can receive up to $7,500 combined.3Yahoo Finance. AT&T Data Breach Class Action Settlement Notices went out in August 2025 after preliminary approval on June 20, 2025.4CPM Legal. CPM Announces Settlement of AT&T Data Breach AT&T denies wrongdoing.5CCH Cybersecurity Privacy. AT&T Settlement Agreement

Kaiser Permanente (Up to $47.5 Million)

Kaiser Permanente’s settlement, which could rise from $46 million to $47.5 million, resolves allegations that third-party tracking tools on Kaiser websites and mobile apps disclosed sensitive patient information.6Kaiser Privacy Settlement. Kaiser Privacy Settlement

Eligible class members who filed a timely claim can expect a single cash payment estimated between roughly $21 and $42, depending on how many claims come in.7ClassAction.org. Up to $47.5M Kaiser Settlement The claims deadline was March 12, 2026, and a final fairness hearing was scheduled for May 7, 2026. Kaiser denies wrongdoing.6Kaiser Privacy Settlement. Kaiser Privacy Settlement

23andMe (Approved, Payments Pending)

Approximately 6.4 million U.S. residents were affected. The settlement received final court approval on January 30, 2026, after 23andMe’s Chapter 11 plan was confirmed on December 5, 2025, and its assets were sold to TTAM Research Institute.823andMe Data Settlement. 23andMe Data Breach Settlement9Kroll Restructuring Administration. 23andMe Restructuring

Eligible class members can receive up to $10,000 for extraordinary claims, up to $165 for health information claims, and an estimated $100 statutory cash payment. Everyone eligible also receives five years of privacy, medical shield, and genetic monitoring services. Cash distribution is pending the bankruptcy reconciliation and could take several months or longer.823andMe Data Settlement. 23andMe Data Breach Settlement

Google Play / COPPA ($8.25 Million)

Google’s settlement addresses claims that children’s personal information was collected through Google Play apps without valid parental consent. The class includes anyone in the United States who was under age 13 when they downloaded or used a Google Play app between April 2015 and the present. The claims deadline is September 14, 2026, and the final approval hearing is set for September 24, 2026.10COPPA Privacy Class Action. COPPA Privacy Class Action Settlement

MOVEit-Related Settlements

The 2023 MOVEit breach hit more than 2,500 organizations. There is no single settlement covering the whole MDL, but several defendants have reached separate deals:11Cohen Milstein. MOVEit Customer Data Security Breach Litigation

Over 100 other MOVEit-related lawsuits remain pending.13HIPAA Journal. Nuance Communications MOVEit Data Breach Settlement

Infosys McCamish Systems ($17.5 Million)

Infosys McCamish’s cybersecurity incident affected more than 3 million retirement and life insurance customers. Eligible class members could claim up to $6,000 for documented losses, two years of free credit monitoring, and a residual pro-rated cash payment estimated at about $30 per person. The claims deadline was December 1, 2025, and the final approval hearing was scheduled for December 18, 2025.14Top Class Actions. $17.5M Infosys McCamish Systems Data Breach Settlement McCamish settled without admitting liability.15Infosys. Cyber Incident Proposed Settlement

Independent Living Systems ($14 Million)

ILS’s 2022 breach affected approximately 3.9 million individuals. Class members who received a notification letter could claim up to $5,000 for documented unreimbursed losses or a pro-rated cash payment. California residents at the time of the breach qualify for a double share. The claims deadline was November 4, 2025, and the final approval hearing was scheduled for November 17, 2025.16Top Class Actions. $14M Independent Living Systems Data Breach Settlement17HIPAA Journal. Independent Living Systems Data Breach Settlement

City of Hope ($8.5 Million)

City of Hope National Medical Center’s October 2023 breach affected more than 827,000 people.18HIPAA Journal. City of Hope National Medical Center Lawsuits Class members could claim up to $5,000 for documented losses, an alternative cash payment of about $100, and California residents an additional $250. Medical information protection and credit monitoring through CyEx are included. The claims deadline was January 13, 2026, and final approval is scheduled for February 20, 2026.19City of Hope Data Breach Settlement. City of Hope Data Breach Settlement FAQ

Deloitte / RIBridges ($6.3 Million)

The December 2024 breach of Rhode Island’s RIBridges public assistance platform affected an estimated 735,501 people. Affected residents could claim an estimated $100 flat payment without documentation or up to $5,000 for verified losses tied to the breach, plus two years of medical data monitoring from CyEx. If every class member files, the flat per-person share drops substantially because attorney fees and administrative costs come out of the fund. The claims deadline was January 14, 2026, with a final approval hearing on January 29, 2026.20News From The States. Deloitte Reaches $6.3M Deal to Settle Class Action Lawsuit Over RIBridges Data Breach21Rhode Island Current. Deadline to Submit Claims for RIBridges Data Breach Settlement Deloitte denied liability.22RIBridges Data Settlement. RIBridges Data Settlement

Landmark Admin ($6 Million)

The May–June 2024 breach at Landmark Admin and six affiliated insurance companies compromised names, Social Security numbers, financial account details, and health insurance information for roughly 1.6 million consumers. Class members could receive up to $2,500 for documented losses or a $30 flat payment. Final approval was granted January 29, 2026, and the administrator began issuing payments in May 2026.23CNBC Select. $6 Million Life Insurance Settlement Alert24Claim Depot. Landmark Data Settlement

Settlements Where Payments Have Closed

A few high-profile settlements have finished paying claimants, but their protection services are still available.

T-Mobile ($350 million). Distribution of payments from the 2021 breach settlement was completed by May 30, 2025. Claimants whose electronic payments failed were contacted in November 2025 and have until March 31, 2026, to request a reissue.25T-Mobile Settlement. T-Mobile Settlement FAQs Identity defense and fraud resolution services remain available through January 2028 whether or not you filed a claim.26T-Mobile Settlement. T-Mobile Data Breach Settlement

Equifax (up to $425 million). Final payments from the restitution fund went out between November and December 2024, with roughly $70 million allocated to alternative compensation and out-of-pocket loss reimbursements.27Equifax. Equifax Statement on Final Payments The claims deadline passed in January 2024, but affected individuals still have free identity restoration services through January 2029 and seven free Equifax credit reports per year through 2026.28FTC. Equifax Data Breach Settlement

Capital One ($190 million). Initial payments went out in September 2023 and a second round in September 2024. Uncashed checks are now void and cannot be reissued, but identity defense and restoration services remain available through February 2028.29Capital One Settlement. Capital One Settlement

Still in Litigation, No Claims Yet

The December 2024 PowerSchool breach exposed data belonging to 62.4 million students and 9.5 million teachers. The cases have been consolidated into a multidistrict litigation in the Southern District of California, and a consolidated complaint was filed in August 2025. No settlement has been reached, so there is nothing to claim yet.30Hagens Berman. PowerSchool Data Breach The broader MOVEit MDL against Progress Software is also still active; a July 2025 ruling let negligence and breach-of-contract claims move forward in two bellwether cases.11Cohen Milstein. MOVEit Customer Data Security Breach Litigation

How to File a Claim

Every settlement has its own claims website (linked above), and each one asks for similar information: your name and contact details, proof you were part of the affected class (usually the notice you received in the mail or by email, which contains a unique claimant ID), and, if you want more than the flat payment, documentation of your out-of-pocket losses. Keep receipts, bank statements, fraud reports, and any records of time spent dealing with identity theft, because most settlements pay lost time at an hourly rate on top of monetary losses.

Two practical points. First, flat cash payments are almost always pro-rated: the number published is an estimate, and the actual check can be smaller if many people file, or occasionally larger if few do. Second, the free credit monitoring, identity defense, and medical data protection services attached to most of these settlements are usually available whether or not you file a claim for cash, and they often run for several years. If you were part of an affected class, enrolling in the free protection is worth doing even when you skip the cash claim.