36M Xfinity customers had their data exposed – here’s how to claim your payout

Source: 9to5Mac

Back in 2023, hackers accessed the personal data of 36 million Xfinity customers. Comcast said at the time that the data exposed included names, contact details, and dates of birth. A class‑action lawsuit followed, and a $117.5 million settlement has now been reached…

The Xfinity data breach

The cybersecurity incident dates back to late 2023.

On October 10, 2023, one of Xfinity’s software providers, Citrix, announced a vulnerability in one of its products used by Xfinity and thousands of other companies worldwide. At the time Citrix made this announcement, it released a patch to fix the vulnerability. Citrix issued additional mitigation guidance on October 23, 2023. Comcast promptly patched and mitigated its systems.

However, it was later discovered that, prior to mitigation, between October 16 and October 19, 2023, there was unauthorized access to some internal systems that was concluded to be a result of this vulnerability. Federal law enforcement was notified and an investigation was launched. It was later determined that the information likely acquired included usernames and hashed passwords. For some customers, other information was also included, such as names, contact information, the last four digits of Social Security numbers, dates of birth, and/or secret questions and answers.

How to claim your payout

Comcast wrote to all affected users to advise them. If you were one of these users, you are now entitled to claim your share of the $117.5 million settlement.

1. Locate your unique settlement member ID number in the email notifying you that your data was exposed.
   If you can’t find that email, you can use the lookup form here to obtain it.

2. Once you have your ID number, you can submit your claim here.
   You may choose between:

   • Accepting a flat cash sum (estimated at $50 per claimant), or
   • Submitting evidence of any out‑of‑pocket losses and lost time to claim a higher amount.

The exact payout amount depends on the total number of claims submitted.

Via CNET. Photo by Nahel Hadi on Unsplash.