Skip to main content

36M Xfinity customers had their data exposed – here’s how to claim your payout

Back in 2023, hackers accessed the personal data of 36 million Xfinity customers. Comcast said at the time that the data exposed included names, contact details, and dates of birth. A class action lawsuit followed, and a $117.5 million settlement has now been reached …

The Xfinity data breach

The cybersecurity incident dates back to late 2023.

On October 10, 2023, one of Xfinity’s software providers, Citrix, announced a vulnerability in one of its products used by Xfinity and thousands of other companies worldwide. At the time Citrix made this announcement, it released a patch to fix the vulnerability. Citrix issued additional mitigation guidance on October 23, 2023. We promptly patched and mitigated our systems.

However, we subsequently discovered that prior to mitigation, between October 16 and October 19, 2023, there was unauthorized access to some of our internal systems that we concluded was a result of this vulnerability. We notified federal law enforcement and conducted an investigation into the nature and scope of the incident. It was later determined that information was likely acquired [that] included usernames and hashed passwords. For some customers, other information was also included, such as names, contact information, last four digits of social security numbers, dates of birth and/or secret questions and answers.

How to claim your payout

Comcast wrote to all affected users to advise them. If you were one of these, you are now entitled to claim your share of a $117.5 million settlement.

You’ll need your unique settlement member ID number, which you’ll find in the email advising you that your data was exposed. If you can’t find that email, you can use a lookup form here to obtain it.

Once you have your number, you can submit your claim here. You have a choice between accepting a flat cash sum, which is estimated to be $50 each, or submitting evidence of any out-of-pocket losses and lost time to claim a higher amount. The exact amount of the payout is dependent on the number of claims submitted.

Via CNET. Photo by Nahel Hadi on Unsplash.

FTC: We use income earning auto affiliate links. More.

You’re reading 9to5Mac — experts who break news about Apple and its surrounding ecosystem, day after day. Be sure to check out our homepage for all the latest news, and follow 9to5Mac on Twitter, Facebook, and LinkedIn to stay in the loop. Don’t know where to start? Check out our exclusive stories, reviews, how-tos, and subscribe to our YouTube channel

Comments

Author

Avatar for Ben Lovejoy Ben Lovejoy

Ben Lovejoy is a British technology writer and EU Editor for 9to5Mac. He’s known for his op-eds and diary pieces, exploring his experience of Apple products over time, for a more rounded review. He also writes fiction, with two technothriller novels, a couple of SF shorts and a rom-com!


Ben Lovejoy's favorite gear