Comcast has reached a $117.5 million settlement to resolve a class-action lawsuit tied to a 2023 data breach that exposed sensitive customer information, according to court filings. The proposed deal, pending judicial approval, would provide compensation to affected subscribers whose personal data was compromised.
The breach, which occurred in early 2023, reportedly involved unauthorized access to Comcast’s systems, potentially exposing names, addresses, and partial Social Security numbers of approximately 1.5 million Xfinity customers. Cybersecurity analysts suggest the incident may have stemmed from vulnerabilities in third-party software used by the telecom giant.
‘This settlement reflects the growing financial consequences companies face for failing to protect consumer data,’ said a legal analyst familiar with the case, who spoke on condition of anonymity. ‘Regulators and courts are increasingly holding corporations accountable for cybersecurity lapses.’
Eligible class members would receive varying compensation amounts based on documented losses, with minimum payments expected to range from $25 to $100 per claimant. The settlement also requires Comcast to enhance its data security measures for at least three years.
The agreement comes as federal lawmakers debate national data privacy legislation. Industry observers note the Comcast case may influence how future breach settlements are structured, particularly regarding security improvement mandates.