Xfinity Data Breach: How 36M Customers Can Claim Their Payout
Comcast has agreed to pay $117.5 million to resolve a class action tied to the Xfinity data breach that affected roughly 36 million customers. The company notified impacted users and provided information on how to file claims.
How the intrusion occurred
Security vendors disclosed a software vulnerability on October 10, 2023. Citrix released a patch the same day and issued extra mitigation guidance on October 23, 2023.
Xfinity said its teams patched and mitigated systems quickly. Investigators later found unauthorized access between October 16 and October 19, 2023.
Data likely exposed
- Usernames and hashed passwords.
- Names and contact information for some customers.
- Dates of birth, last four digits of Social Security numbers, and secret questions and answers for some accounts.
Settlement and eligibility
A class action suit resulted in a $117.5 million settlement. Customers whose data was exposed can file claims to receive compensation.
The notice sent by Comcast includes a unique settlement member ID number. That ID is required to file a claim.
How to claim your payout
If you received the exposure notice, use the member ID in that email when you submit a claim. If you cannot find the message, a lookup form on the settlement website can retrieve your ID.
Claimants may choose a flat cash payment or seek reimbursement for documented out-of-pocket losses and lost time. The flat sum is estimated at about $50 per person. The final payment per claimant depends on how many valid claims are submitted.
Timeline at a glance
- October 10, 2023 — Vulnerability announced and patch released.
- October 16–19, 2023 — Unauthorized access to internal systems occurred.
- October 23, 2023 — Additional mitigation guidance issued by the vendor.
This article outlines the Xfinity data breach, its scope, and how affected customers can claim their payout. Filmogaz.com will monitor developments and provide further updates as needed.
