A 2023 data breach uncovered usernames, hashed passwords, and in some instances the final 4 digits of Social Security numbers, contact data and safety solutions.
WASHINGTON — Xfinity prospects may very well be eligible for money and identification theft monitoring after Comcast agreed to pay $117.5 million to settle a class motion lawsuit stemming from a 2023 cyberattack that uncovered the non-public data of tens of tens of millions of Xfinity prospects, in accordance to courtroom paperwork.
The proposed settlement, pending approval within the U.S. District Court for the Eastern District of Pennsylvania, would resolve claims that Comcast failed to adequately shield buyer data after hackers exploited a vulnerability in Citrix software program between Oct. 16 and Oct. 19, 2023. The firm disclosed the breach in December 2023.
The assault affected an estimated 35.8 million prospects — greater than the corporate’s complete broadband subscriber base on the time — exposing usernames, hashed passwords, and in some instances the final 4 digits of Social Security numbers, contact data, and safety questions and solutions.
Comcast denies any wrongdoing or violation of the regulation.
Comcast settlement: Who’s eligible for a payout?
Customers who obtained a breach notification from Comcast are routinely included within the settlement class.
Eligible prospects can file a claim for reimbursement of documented out-of-pocket losses — corresponding to prices associated to identification theft, credit score monitoring providers or credit score freezes incurred after Oct. 16, 2023 — up to a cap of $10,000. Customers who frolicked coping with fraud or taking preventative measures can even claim up to 5 hours of misplaced time at $30 per hour.
Those with out documented losses can go for another money fee of round $50, although that quantity could also be adjusted up or down relying on how many claims are filed.
All settlement class members are additionally routinely eligible to enroll in three years of identification safety providers, which embrace credit score monitoring, darkish net monitoring, up to $1 million in identification theft insurance coverage, and entry to fraud specialists.
Key deadlines and how to file a claim
The deadline to file a claim is Aug. 14.
Claims might be submitted on-line at www.comcastbreachsettlement.com or mailed to the settlement administrator, Kroll Settlement Administration LLC. Customers will want to present a distinctive Class Member ID that was despatched through electronic mail or might be seemed up on-line.
The courtroom is scheduled to maintain a ultimate approval listening to on July 7.
Customers who do nothing will stay a part of the settlement class, surrender their proper to sue over the breach, and won’t obtain a money fee — however will nonetheless have the opportunity to enroll within the identification safety providers as soon as the settlement is finalized.
For extra data or to file a claim, go to the settlement website or name (833) 319-2401.
