About 36 million Xfinity customers were affected by a 2023 data breach, according to figures disclosed in a Maine attorney-general filing and cited by the U.S. Army Cyber Directorate. Comcast did not confirm a specific total to The Associated Press. Xfinity said the exposed information included usernames and hashed passwords, and that some customers’ records also contained other personal details. If you had an Xfinity account, reset its password, secure any accounts where you reused that password, and check the current status of the settlement: its listed claim deadline has passed.
What happened in the Xfinity breach
Xfinity’s incident notice traces the breach to unauthorized access that occurred before the company mitigated a vulnerability associated with Citrix. The company’s notice described the following timeline:
| Date | What Xfinity said happened |
|---|---|
| October 10, 2023 | Citrix announced a vulnerability. |
| October 16–19, 2023 | Unauthorized access to Xfinity systems occurred before mitigation. |
| November 16, 2023 | Xfinity determined that information was likely acquired. |
| December 6, 2023 | Xfinity concluded that usernames and hashed passwords were involved. Its analysis was continuing. |
Xfinity said in December 2023 that it was “not aware of any customer data being leaked anywhere, nor of any attacks on our customers.” That statement describes what the company said it knew at the time; it does not establish that no information was accessed or that no customer could face later misuse.
How many people were affected—and what information was exposed?
The Associated Press reported that a Maine attorney-general filing disclosed nearly 35.9 million affected user IDs. The U.S. Army Cyber Directorate separately described approximately 36 million affected customers in a December 20, 2023 flyer. These are filing-based and rounded figures: Comcast did not confirm a specific number to the AP, so “about 36 million” is the careful way to state the scale.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
#1 Best Overall
Xfinity said usernames and hashed passwords were involved. For some customers, the information also included one or more of the following:
- Name and contact information
- The last four digits of a Social Security number
- Date of birth
- Secret questions and answers
The notice does not say that every affected record contained every listed item. A hashed password is not the same as a password displayed in plain text, but exposure of a password hash still warrants changing the password—especially if you reused it. The notice does not establish whether your individual account or particular data fields were involved, and the breach alone does not prove that identity theft occurred.
Rank #2
- Ideal for Gifting
- Ideal for a bookworm
- Compact for travelling
What to do if you had an Xfinity account
Xfinity required password resets and strongly encouraged two-factor or multi-factor authentication. Its current compromised-ID guidance says a potentially compromised Xfinity ID may be disabled until it is reset. Once you regain access, use this checklist:
- Reset your Xfinity password. If you cannot sign in because the ID is disabled, follow Xfinity’s reset process to restore access.
- Replace reused passwords elsewhere. Change the same or similar password on every other account where you used it. Use a different, unique password for each service.
- Turn on multi-factor authentication. Xfinity encouraged customers to enroll. MFA adds a second verification step, so a password alone is less likely to be enough to access an account.
- Review account access and activity. Check for unfamiliar users, account-change notices, unrecognized charges, or service changes.
- Check recovery and calling settings. Review your voice and voicemail PINs, plus the third-party recovery email addresses and phone numbers connected to the account.
- Watch for identity or financial misuse. Monitor relevant accounts and credit reports. The Army Cyber Directorate also recommends considering a free credit freeze or fraud alert, keeping software updated, and treating unsolicited calls or emails asking for information as suspicious.
A credit freeze can make it harder for someone to open new credit in your name, while a fraud alert asks creditors to take extra steps to verify your identity. These are precautionary measures, not evidence that someone has used your information.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallIs the Comcast settlement real, and can you still file a claim?
The settlement concerns Hasson v. Comcast Cable Communications LLC, Eastern District of Pennsylvania, Case No. 2:23-cv-05039-JMY. The court-approved settlement website says the court approved the settlement on August 20, 2026, and establishes a $117,500,000 settlement fund. The administrator listed September 14, 2026, as the claim deadline. That date has passed as of the administrator’s status reported October 2, 2026, so do not assume a new claim can still be filed; check the settlement administrator for any updated status or instructions.
The settlement FAQ describes these benefits for eligible class members:
Rank #4
| Benefit or claim type | What the settlement FAQ says |
|---|---|
| Documented out-of-pocket losses | Eligible members may seek reimbursement for documented losses. |
| Lost time | A claim for $30 per hour for up to five hours. |
| Alternative cash payment | An estimated $50 payment, subject to pro rata adjustment. |
| Identity-defense service | Three years of CyEx Financial Shield Complete for eligible members. |
The $50 figure is an estimate subject to adjustment, not a guaranteed payment amount. The service benefit is listed as including one-bureau credit monitoring, dark-web monitoring, real-time authentication alerts, high-risk transaction monitoring, lost-wallet protection, $1 million identity-theft insurance, security-freeze assistance, victim assistance, financial-transaction monitoring, monthly credit-score tracking, fictitious-identity monitoring, bank and financial-account monitoring, address-change monitoring, home-title monitoring, and trained customer-service support. The settlement information identifies these as benefits for eligible class members; check the administrator’s current information for eligibility and delivery details.
Quick Recap
Best Value
- It can be a gift option
- Comes with secure packaging
- Helpful in various ways
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →
