A 2023 knowledge breach uncovered usernames, hashed passwords, and in some circumstances the final 4 digits of Social Safety numbers, touch information and safety solutions.
WASHINGTON — Xfinity consumers may well be eligible for money and identification robbery tracking after Comcast agreed to pay $117.5 million to settle a category motion lawsuit stemming from a 2023 cyberattack that revealed the private knowledge of tens of thousands and thousands of Xfinity consumers, consistent with courtroom paperwork.
The proposed agreement, pending approval within the U.S. District Court docket for the Japanese District of Pennsylvania, would get to the bottom of claims that Comcast did not adequately offer protection to buyer knowledge after hackers exploited a vulnerability in Citrix tool between Oct. 16 and Oct. 19, 2023. The corporate disclosed the breach in December 2023.
The assault affected an estimated 35.8 million consumers — greater than the corporate’s complete broadband subscriber base on the time — exposing usernames, hashed passwords, and in some circumstances the final 4 digits of Social Safety numbers, touch knowledge, and safety questions and solutions.
Comcast denies any wrongdoing or violation of the regulation.
Comcast agreement: Who is eligible for a payout?
Shoppers who won a breach notification from Comcast are mechanically integrated within the agreement elegance.
Eligible consumers can report a declare for repayment of documented out-of-pocket losses — akin to prices associated with identification robbery, credit score tracking products and services or credit score freezes incurred after Oct. 16, 2023 — as much as a cap of $10,000. Shoppers who hung out coping with fraud or taking preventative measures too can declare as much as 5 hours of misplaced time at $30 in keeping with hour.
The ones with out documented losses can go for an alternate money cost of round $50, although that quantity could also be adjusted up or down relying on what number of claims are filed.
All agreement elegance participants also are mechanically eligible to sign up for 3 years of identification coverage products and services, which come with credit score tracking, darkish internet tracking, as much as $1 million in identification robbery insurance coverage, and get admission to to fraud experts.
Key time limits and report a declare
The cut-off date to report a declare is Aug. 14.
Claims can also be submitted on-line at www.comcastbreachsettlement.com or mailed to the agreement administrator, Kroll Agreement Management LLC. Shoppers will want to supply a singular Magnificence Member ID that was once despatched by means of electronic mail or can also be seemed up on-line.
The courtroom is scheduled to carry a last approval listening to on July 7.
Shoppers who do not anything will stay a part of the agreement elegance, surrender their proper to sue over the breach, and won’t obtain a money cost — however will nonetheless be ready to sign up for the identification coverage products and services as soon as the agreement is finalized.
For more info or to report a declare, consult with the agreement web site or name (833) 319-2401.