The US Federal Communications Commission (FCC) has reached a $1.5 million settlement with Comcast Cable Communications following a data breach at a third-party vendor that exposed sensitive data of over 237,000 Comcast subscribers. The breach stemmed from a February 2024 security incident at debt collector Financial Business and Consumer Solutions, Inc. (FBCS), a former Comcast contractor. Comcast is one of the largest cable and broadband service providers in the United States, operating under the Xfinity brand. It serves tens of millions of residential and business customers through its offerings in internet, TV, streaming, mobile, and home security services. The settlement resolves the agency's investigation into whether Comcast violated federal cable privacy laws, specifically sections 631(c) and (e) of the Cable Communications Policy Act of 1984. These provisions require cable providers to safeguard subscribers' personally identifiable information (PII) and to destroy it when no longer needed. FBCS, a New Jersey-based debt collection agency, had previously been contracted by Comcast from 2010 to 2022 to handle delinquent accounts. During this period, Comcast shared customer PII with FBCS for debt recovery purposes. Although Comcast terminated its relationship with FBCS in 2020 and fully ended operations with them by 2022, sensitive subscriber data remained on FBCS systems. In February 2024, FBCS experienced a cyberattack that compromised its network between February

The Maine Office of the Attorney General reported a data breach at Comcast Cable Communications LLC's Financial Business and Consumer Solutions (FBCS) division. The breach occurred between February 14 and February 26, 2024, affecting 237,703 individuals. Unauthorized access and data downloads included names, addresses, Social Security numbers, and Comcast account details. The breach was discovered on July 17, 2024. Comcast is offering 12 months of complimentary identity theft protection services through CyEx Identity Defense Complete.

Comcast Data Breach Settlement: 31.6–35 Million Customers Affected A major data breach at Comcast Cable Communications LLC exposed sensitive information of 31.6 to 35 million customers, including usernames, hashed passwords, contact details, and partial Social Security numbers. The breach, caused by a software vulnerability, occurred in October 2023 and was reported by the company in December 2023. The incident led to a class-action lawsuit, Hasson v. Comcast Cable Communications LLC, alleging inadequate data protection. While Comcast denies wrongdoing, a settlement has been reached to resolve claims. Affected customers who received a breach notice are eligible for compensation, with two options: - $50 cash payment for those impacted. - Up to $150 for reimbursement of lost time (up to 3 hours at $30/hour) or documented out-of-pocket expenses tied to the breach. Claims must be submitted by August 14, 2024, via the official settlement website or mail to Hasson v. Comcast Cable Communications LLC, c/o Kroll Settlement Administration LLC. A final hearing to approve the settlement is set for July 7, 2024, with payments expected later this year. The case underscores the financial and reputational risks companies face due to cybersecurity failures.