Xfinity Breach Settlement: Cash and ID Protection

A class action accuses Comcast Cable Communications LLC of failing to safeguard Xfinity customer data and of delaying notice after hackers exploited a known vulnerability between October 16 and 19, 2023. The breach reportedly exposed usernames and hashed passwords, and for some customers also names, contact information, dates of birth, security question answers, and the last four digits of Social Security numbers. Comcast denies any wrongdoing.

The case has reached a settlement, meaning it remains in court rather than arbitration and has not yet been finally resolved.

Eligible customers may file a claim for several possible benefits: reimbursement for documented out-of-pocket losses and lost time, a no-documentation alternative cash payment, and up to three years of identity protection services. Claims for losses or lost time require supporting documentation, but the basic cash payment only requires confirming class membership.

Comcast has already identified the customers whose data may have been affected, and those individuals are automatically included in the settlement unless they opt out.

To check inclusion, watch for a notice sent by mail or email, or use the ID Lookup Form on the claim form website by selecting "Apply on Website."

No payments or benefits will be issued unless the court grants final approval and any appeals are resolved.