Comcast has agreed to a $117.5 million class-action settlement to resolve claims from a cybersecurity breach that occurred between October 16 and October 19, 2023. The breach exposed customer usernames, passwords, contact information, dates of birth, the last four digits of Social Security numbers, and security questions and answers.

Customers who received notices around December 18, 2023 indicating potential data compromise are eligible to submit claims through August 14, 2026. Claimants can seek up to $10,000 for documented out-of-pocket losses and lost time or opt for a $50 cash payment without documentation, and will gain access to identity defense and restoration services once the settlement is finalized. Parties wishing to opt out must submit a written request by June 1, 2026.

The $117.5 million settlement represents a one-time expense that will be recorded as a legal liability in Comcast's quarterly financials. While the payout is a modest percentage of the company's annual revenues, it underscores ongoing cybersecurity risks and potential reputational impacts that could influence customer trust and future operating costs.