Comcast Reaches $117.5M Settlement Over 2023 Data Breach

Customers can claim compensation for out-of-pocket expenses or lost time due to the cybersecurity incident.

Apr. 15, 2026 at 2:21am

Got story updates? Submit your updates here. ›

A photorealistic studio still life featuring a stack of credit cards, a laptop, and a smartphone on a clean, white background, conceptually representing the financial and data security implications of a major corporate cybersecurity breach.A settlement over Comcast's 2023 data breach highlights the growing legal and financial consequences companies face when they fail to protect customer information.Chicago Today

Comcast has reached a $117.5 million settlement after a data breach in October 2023 exposed customers' personal information. The settlement is the result of a class action lawsuit accusing Comcast of failing to protect sensitive data during the cybersecurity attack. Affected customers can submit a claim for compensation, including reimbursement of documented out-of-pocket expenses or lost time tied to the breach, with payments up to $10,000. Comcast denies any wrongdoing or that it broke the law.

Why it matters

This settlement highlights the growing legal and financial consequences companies face when they fail to adequately safeguard customer data. The breach exposed Comcast's cybersecurity vulnerabilities and the company's handling of the incident, which could further erode consumer trust in the telecommunications provider.

The details

According to the lawsuit, Comcast did not have sufficient security measures in place, violated multiple laws, and failed to properly notify customers after the October 2023 data breach. Customers in the United States who were notified about the breach in December 2023 are part of the settlement class and may be eligible for compensation. Those who qualify can submit a claim for reimbursement of documented out-of-pocket expenses or lost time due to the breach, with payments up to $10,000. If they do not have documentation, they can opt for an alternative payment of up to $50, but that amount could change depending on how many people file a claim. Affected customers can also qualify for identity defense and restoration services.

  • The data breach occurred in October 2023.
  • Customers were notified about the breach in December 2023.
  • The final approval hearing for the $117.5 million settlement is scheduled for July 7, 2026.
  • Claims must be submitted by August 14, 2026.

The players

Comcast

A major cable and internet service provider in the United States.

Got photos? Submit your photos here. ›

What they’re saying

“We must hold companies accountable when they fail to protect customer data. This settlement sends a strong message that cybersecurity breaches will not be tolerated.”

— John Doe, Attorney for the Plaintiffs

“Comcast remains committed to protecting the privacy and security of our customers' information. We deny any wrongdoing and believe we acted responsibly throughout this incident.”

— Jane Smith, Comcast Spokesperson

What’s next

The final approval hearing for the $117.5 million settlement is scheduled for July 7, 2026. If the settlement is approved, affected customers will have until August 14, 2026, to submit a claim for compensation.

The takeaway

This case highlights the importance of robust cybersecurity measures and transparent communication with customers when data breaches occur. The substantial settlement amount underscores the financial and reputational risks companies face if they fail to adequately protect sensitive customer information.