$117.5M Comcast data breach settlement: Who qualifies and how to file a claim
A 2023 data breach uncovered usernames, hashed passwords, and in some circumstances the final 4 digits of Social Security numbers, contact information and safety solutions.
WASHINGTON — Xfinity clients may very well be eligible for money and id theft monitoring after Comcast agreed to pay $117.5 million to settle a class motion lawsuit stemming from a 2023 cyberattack that uncovered the private info of tens of hundreds of thousands of Xfinity clients, in accordance to courtroom paperwork.
The proposed settlement, pending approval within the US District Court for the Eastern District of Pennsylvania, would resolve claims that Comcast failed to adequately defend buyer data after hackers exploited a vulnerability in Citrix software program between Oct. 16 and Oct. 19, 2023. The firm disclosed the breach in December 2023.
The assault affected an estimated 35.8 million clients — greater than the corporate’s total broadband subscriber base on the time — exposing usernames, hashed passwords, and in some circumstances the final 4 digits of Social Security numbers, contact info, and safety questions and solutions.
Comcast denies any wrongdoing or violation of the regulation.
Comcast settlement: Who’s eligible for a payout?
Customers who obtained a breach notification from Comcast are mechanically included within the settlement class.
Eligible clients can file a claim for reimbursement of documented out-of-pocket losses — corresponding to prices associated to id theft, credit score monitoring companies or credit score freezes incurred after Oct. 16, 2023 — up to a cap of $10,000. Customers who frolicked coping with fraud or taking preventative measures also can claim up to 5 hours of misplaced time at $30 per hour.
Those with out documented losses can go for another money cost of round $50, though that quantity could also be adjusted up or down relying on how many claims are filed.
All settlement class members are additionally mechanically eligible to enroll in three years of id safety companies, which embody credit score monitoring, darkish net monitoring, up to $1 million in id theft insurance coverage, and entry to fraud specialists.
Key deadlines and how to file a claim
The deadline to file a claim is Aug. 14.
Claims might be submitted on-line at www.comcastbreachsettlement.com or mailed to the settlement administrator, Kroll Settlement Administration LLC. Customers will want to present a distinctive Class Member ID that was despatched by way of e mail or might be appeared up on-line.
The courtroom is scheduled to maintain a closing approval listening to on July 7.
Customers who do nothing will stay a part of the settlement class, surrender their proper to sue over the breach, and is not going to obtain a money cost — however will nonetheless have the opportunity to enroll within the id safety companies as soon as the settlement is finalized.
For extra info or to file a claim, go to the settlement website or name (833) 319-2401.
