Comcast Xfinity Data Breach Settlement: Millions Eligible for Cash & Identity Protection
WASHINGTON – Xfinity customers may be entitled to financial compensation and crucial identity theft monitoring services following Comcast’s agreement to settle a class-action lawsuit for $117.5 million. The lawsuit stems from a significant cyberattack in 2023 that compromised the personal information of tens of millions of Xfinity subscribers, as detailed in court documents.
What Happened? The 2023 Xfinity Data Breach
The proposed settlement, currently awaiting approval from the U.S. District Court for the Eastern District of Pennsylvania, addresses claims that Comcast failed to adequately safeguard customer data. Hackers exploited a vulnerability in Citrix software between October 16th and 19th, 2023, leading to the breach, which Comcast disclosed in December 2023.
The attack impacted an estimated 35.8 million customers – exceeding Comcast’s entire broadband subscriber base at the time. Exposed data included usernames, hashed passwords, and, in some instances, the last four digits of Social Security numbers, contact information, and security questions and answers. Comcast maintains it did not engage in any wrongdoing or violate any laws.
Are You Eligible for the Settlement?
If you received a data breach notification from Comcast, you are automatically included in the settlement class. You have several options for receiving benefits:
- Reimbursement for Out-of-Pocket Losses: Eligible customers can file a claim to recover documented expenses incurred after October 16, 2023, related to identity theft, credit monitoring services, or credit freezes, up to a maximum of $10,000.
- Compensation for Lost Time: Individuals who dedicated time to addressing fraud or implementing preventative measures can claim up to five hours of lost time at a rate of $30 per hour.
- Alternative Cash Payment: Those without documented losses can opt for an approximate $50 cash payment. This amount is subject to adjustment based on the total number of claims submitted.
- Free Identity Protection Services: All class members are automatically eligible for three years of identity protection services, including credit monitoring, dark web monitoring, up to $1 million in identity theft insurance, and access to fraud specialists.
How to File a Claim
The deadline to submit a claim is August 14th. Claims can be filed through the following methods:
- Online: www.comcastbreachsettlement.com
- By Mail: Kroll Settlement Administration LLC
You will need your unique Class Member ID, which was sent via email or can be located online through the settlement website.
What Happens If You Do Nothing?
If you choose not to file a claim, you will remain part of the settlement class, waive your right to sue Comcast over the breach, and will not receive a cash payment. However, you will still be eligible to enroll in the complimentary identity protection services once the settlement is finalized.
Important Dates & Resources
- Final Approval Hearing: July 7th
- Claim Deadline: August 14th
- Settlement Website: www.comcastbreachsettlement.com
- Settlement Hotline: (833) 319-2401
For further information on data breach prevention, consider resources from the Federal Trade Commission (FTC) and the Consumer Financial Protection Bureau (CFPB).
