ENKR

Comcast Xfinity data breach

Add to my breach check

Made public · 35,879,455 people

What leaked6

Replaceable

  • Password
  • Security questions and answers

Hard to replace

  • Other profile data
  • Username

Permanent

  • Date of birth
  • Full name
  • Passwordhashed passwords
  • Security questions and answerssome customers
  • Date of birthsome customers
  • Full namesome customers
  • Other profile datalast four digits of the Social Security number, contact information · some customers

To-dos4 · about 1 h 30 min in all

  1. Change the leaked password everywhere you reused itabout 30 minfreeStops: account takeover
  2. Turn on two-step sign-in for email and bankingabout 15 minfreeLimits harm from: account takeover, recovery takeover
  3. Use an authenticator app or passkey instead of SMS codesabout 20 minfreeLimits harm from: account takeover
  4. Reset security questions and remove password hintsabout 15 minfreeStops: recovery takeover

What happened next11 events

  1. UndetectedNone on record
  2. Response 6 eventsNo individual notice on record · show events
  3. Remedy 2 eventsEnded · show events
  4. PenaltyNone on record
  5. Disputes 3 eventsSettled · Back to latest

Disputes: 3 events

Back to latest
  1. Final approval of the class settlement; attorneys' fees of 31,725,000 USD, 27% of a 117.5 million USD fund
  2. Preliminary approval of the class settlement
  3. Class action filed in the Eastern District of Pennsylvania; later the master case for consolidated suits against Comcast and Citrix
Company
Comcast
When it happened
–
Made public
Notice
Leak confirmed
Affected
35,879,455 people · Comcast's filing with the Maine attorney general, as reported; about 31.7 million potential class members in the 2026 settlement

Sources