Comcast (CMCSA) opens claims in $117.5 million Xfinity data breach settlement

Comcast Corp. (CMCSA) has agreed to pay $117.5 million to settle a class-action lawsuit over an October 2023 cybersecurity breach that exposed personal data of millions of Xfinity customers. The company denies wrongdoing. The breach, disclosed in December 2023, exposed usernames, passwords, names, contact information, partial Social Security numbers, birth dates and security questions or answers. The lawsuit alleged Comcast failed to adequately protect customer data after hackers accessed internal systems from October 16 to October 19, 2023. Eligible customers are those who received notice around December 18, 2023, that their information may have been compromised. Claims must be submitted by August 14, 2026, for reimbursement of documented out-of-pocket losses and lost time, up to $10,000, or a $50 cash payment without documentation. Customers must opt out by June 1, 2026, or remain in the settlement class and waive related legal claims.