Comcast to Pay $117.5 Million to Settle 2023 Data Breach Lawsuit
The cable giant will compensate U.S. customers after allegations of delayed victim notification and failure to patch known vulnerabilities.
Comcast has agreed to a $117.5 million settlement to resolve a class action lawsuit following a significant data breach in late 2023. The agreement aims to compensate current and former U.S. customers for security failures and the subsequent handling of their personal information.
As part of the settlement in Hasson v. Comcast Cable Communications, LLC, the company has established a fund totaling $117.5 million. Eligible users can seek compensation for out-of-pocket losses, reimbursement for time spent addressing the breach, or a flat cash payment. The breach occurred over a narrow window between October 16 and October 19, 2023.
The Failure to Notify
The legal action centered not only on the initial intrusion but on Comcast's response. The lawsuit alleged that the company failed to promptly patch a known vulnerability in its Citrix NetScaler products after a public warning was issued on October 10, 2023. Further criticism focused on the company's communication timeline; Comcast did not notify affected customers until December 18, 2023.
This two-month delay allegedly prevented users from taking immediate protective measures, such as freezing their credit, while their data remained exposed. The gap between the breach and the announcement potentially increased the opportunity for identity thieves to exploit stolen data.
Industry Implications
This case underscores a shifting legal landscape where companies are held accountable for "unreasonable delays" in victim notification. Legal experts suggest the case serves as a sharp reminder of the risks consumers face when companies cut corners on cybersecurity. By failing to act on public warnings and delaying transparency, Comcast faced significant financial and reputational liability.
Next Steps for Consumers
Affected customers must act by the updated deadline of September 14, 2026, to submit their claims for compensation. The final approval hearing for the settlement is now scheduled for August 5, 2026. Users are encouraged to monitor official settlement communications to verify their eligibility and complete the filing process to ensure they receive their portion of the $117.5 million fund.