Comcast Pays $117.5 Million to Settle 2023 Data Breach, Deadline Ends Sunday

American cable and internet company Comcast has reached a $117.5 million settlement to resolve lawsuits related to a 2023 cyberattack that resulted in the exposure of personal data belonging to a large number of its customers. Eligible customers must submit their claims before the deadline set for September 14.

The cyberattack exposed sensitive data including names, mailing addresses, Social Security numbers, and financial information of subscribers to Comcast and Xfinity services. This attack is classified among a long series of major breaches targeting U.S. telecommunications and digital service companies.

A settlement of this size is among the highest in class-action data breach cases, although the amounts individual customers will receive will remain modest relative to the potential harm. This brings the issue of measuring damage caused by digital breaches back to the forefront of legal discussion.

The announcement of the settlement coincides with doubled regulatory scrutiny over cybersecurity practices in the telecommunications sector, as U.S. regulatory bodies and emerging requirements step up pressure on companies to upgrade their digital defenses and notify customers faster in breach incidents. This settlement is likely to push other companies to review their cybersecurity protocols.

What do these terms mean?

Data Breach: An incident in which an unauthorized party gains access to sensitive data, whether through a technical breach or an internal leak.

Class Action: A lawsuit in which a large number of affected parties combine their similar claims into a single lawsuit against the defendant to maximize their bargaining power.

Xfinity: The brand name for internet and cable services provided by Comcast to millions of subscribers in the United States.