Comcast to Pay $117M in Security Breach Settlement – TechRepublic

Comcast has agreed to pay $117.5 million to settle a class action lawsuit tied to a large-scale data breach that came to light in late 2023.

This marks one of the more significant consumer privacy settlements in the U.S. telecommunications sector.

The settlement has just received preliminary approval under an order publicly released. If finalized, it will compensate more than 31 million people across the U.S. and its territories who received notification that their personal information may have been compromised. Comcast discovered the breach in October 2023 but did not disclose it publicly until December of that year, prompting scrutiny from customers, regulators, and security researchers.

Details of the breach and settlement scope

According to Comcast, the breach was linked to a vulnerability known as “CitrixBleed,” a flaw affecting Citrix NetScaler Application Delivery Controller and Gateway appliances. The…