• Closed to New Clients
  • Data Privacy
  • January 04, 2024

Did Comcast/Xfinity Expose Your Personal Information?

You may be entitled to up to $750.

  • You may qualify for this claim if your personal data was exposed in the Xfinity data breach.
  • You should sign up if your personal data was compromised in the Xfinity data breach.
  • All claims are backed by Labaton Keller Sucharow, a national law firm that has recouped over $25 Billion for people like you.

Xfinity recently reported a significant data breach incident impacting 36 million Xfinity customers nationwide. USA Today and CBS News confirm the breach was caused by the exploitation of a critical security vulnerability that has been under mass-exploitation by hackers since late August 2023. Citrix had issued patches for this vulnerability in early October, but technology publications like ArsTechnica suggest that many organizations, including Xfinity, did not implement these patches in time.

According to MSN, between October 16 and October 19, 2023, hackers gained unauthorized access to Xfinity’s internal systems. The company did not detect this malicious activity until October 25. By November 16, Xfinity confirmed that customer data was likely acquired by the hackers. In December, they announced that the breached data included customer usernames and hashed passwords. For some customers, additional data such as names, contact information, dates of birth, the last four digits of Social Security numbers, and secret questions and answers were also compromised. While the company asserts that there is no evidence of the leaked data being used maliciously or any ransom demands being made, the incident raises questions about Xfinity’s cybersecurity practices, particularly regarding the timely patching of known vulnerabilities and the measures needed to prevent similar breaches in the future. The company may release more information about the breach.

Labaton is investigating the pursuit of private arbitration claims against Xfinity on behalf of Xfinity members who were notified that their personal and account information were exposed as a result of this breach. Successful claims could be entitled to compensation of up to $750 under California privacy laws.


Please remember:

This content is for your information only and is not legal advice. We are not your lawyers until you sign an attorney-client agreement with us. All information provided by you is confidential and will only be used for your case.

Frequently asked questions

  • Miscellaneous
How do I know if I might be eligible for this claim?
Xfinity reported that all, or nearly all, of its 36 million customers nationwide were impacted by the breach. Check and see if you qualify for this claim using the link above.
What is the California Privacy Rights Act and California Consumer Privacy Act?
The California Privacy Rights Act (“CPRA”) and California Consumer Privacy Act (“CCPA”) are comprehensive privacy laws in California. They aims to protect individuals’ data privacy rights. Companies that are subject to data theft or breaches can be subject to statutory damages up to $750 for exposing certain categories of consumers’ information.
How do I protect myself after a data breach?
Data breaches are becoming increasingly commonplace. However, you can do a few things to protect yourself if you think you have had your information exposed in a data breach. First, you should change the passwords for all your online accounts. Most people use the same or similar passwords for all their online accounts. So, if one password was exposed, there is a chance a hacker could gain access to all your online accounts. Second, it is important to monitor your online accounts for any suspicious activity. Be on the lookout for strange charges that you do not recognize or any phishing emails.
How do I find the data breach notice?
Xfinity is reportedly still in the process of sending out breach notices to those impacted. When a company begins sending out data breach notices, it will typically come via email or mail. So, continue to monitor your inbox for the email address you used to sign up for Xfinity. Likewise, continue to monitor your mail in the coming weeks.
What is arbitration?
Arbitration is a private dispute resolution process. Your claim will not be filed in court. Your claim will be decided by an arbitrator, who is a neutral person chosen by you and the company. We can select an arbitrator for you who is fair and neutral.
Is arbitration confidential?
Yes, arbitration is a confidential, private process.

Explore our cases