Comcast to Pay $117.5 Million to Settle 2023 Data Breach, Deadline Ends Sunday

American cable and internet company Comcast reached a $117.5 million settlement to resolve lawsuits related to a 2023 cyberattack that resulted in the exposure of personal data belonging to a large number of its customers. Eligible customers must submit their claims before the deadline set for September 14.

The cyberattack exposed sensitive data including names, mailing addresses, Social Security numbers, and financial information of subscribers to Comcast and Xfinity services. This attack is categorized among a long series of major breaches targeting U.S. telecommunications and digital services companies.

A settlement of this size is considered one of the largest in class-action data breach cases, even though individual amounts received by each customer will remain modest compared to the potential damage. This brings the issue of measuring harm resulting from digital breaches back to the forefront of legal discussion.

The announcement of the settlement coincides with increased regulatory scrutiny over cybersecurity practices in the telecommunications sector, as U.S. regulatory bodies and new requirements step up pressure on companies to upgrade their digital defenses and notify customers faster in cases of breaches.

What do these terms mean?

Security Breach: An incident in which an unauthorized party gains access to sensitive data through a technical breach or internal leak.

Class Action: A lawsuit in which a large number of affected individuals combine their claims into a single lawsuit to maximize their bargaining power.

Xfinity: The brand name for internet and cable services provided by Comcast to millions of subscribers in the United States.