Comcast Xfinity Data Breach Settlement Reaches $117.5 Million
Comcast has agreed to a $117.5 million class action settlement to resolve claims stemming from a cybersecurity incident in October 2023 that exposed the personal data of millions of Xfinity customers. While the company denies any wrongdoing, the settlement aims to avoid prolonged litigation.
Eligible customers those who received a breach notification around December 18, 2023 can file claims for compensation, including:
- Up to $10,000 for documented out-of-pocket losses tied to the breach.
- Reimbursement for time spent addressing breach-related issues.
- A cash payment (estimated at ~$50) for those without documented losses, though the final amount depends on claim volume.
Additionally, settlement class members may receive identity theft protection and restoration services pending final court approval.
The claim deadline is September 14, 2026, with submissions accepted online or by mail. Customers who lost their notification letter can verify eligibility via the settlement website’s ID lookup tool. The final approval hearing is scheduled for August 5, 2026, after which valid claimants will receive benefits as outlined in the settlement terms.
The breach highlights the ongoing risks of large-scale data exposures and the financial repercussions for affected companies.
Source: https://uk.finance.yahoo.com/news/xfinity-data-breach-claim-10-224622525.html
Comcast cybersecurity rating report: https://www.rankiteo.com/company/comcast
"id": "COM1785580087",
"linkid": "comcast",
"type": "Breach",
"date": "10/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Millions',
'industry': 'Telecommunications',
'location': 'United States',
'name': 'Comcast Xfinity',
'size': 'Large',
'type': 'Corporation'}],
'customer_advisories': 'Eligible customers can file claims for compensation '
'by September 14, 2026. Identity theft protection and '
'restoration services may be provided.',
'data_breach': {'number_of_records_exposed': 'Millions',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Personal data'},
'date_detected': '2023-10',
'date_publicly_disclosed': '2023-12-18',
'description': 'Comcast has agreed to a $117.5 million class action '
'settlement to resolve claims stemming from a cybersecurity '
'incident in October 2023 that exposed the personal data of '
'millions of Xfinity customers. The settlement includes '
'compensation for documented losses, reimbursement for time '
'spent addressing breach-related issues, and cash payments for '
'those without documented losses.',
'impact': {'data_compromised': 'Personal data of millions of Xfinity '
'customers',
'financial_loss': '$117.5 million (settlement amount)',
'identity_theft_risk': 'High',
'legal_liabilities': 'Class action settlement'},
'investigation_status': 'Settled (pending final court approval)',
'lessons_learned': 'Highlights the ongoing risks of large-scale data '
'exposures and the financial repercussions for affected '
'companies.',
'references': [{'source': 'Settlement announcement'}],
'regulatory_compliance': {'legal_actions': 'Class action lawsuit'},
'response': {'communication_strategy': 'Breach notification sent to affected '
'customers on December 18, 2023'},
'title': 'Comcast Xfinity Data Breach Settlement',
'type': 'Data Breach'}