Comcast Data Breach Lawsuit Says Info of More Than 237K Customers Impacted in FBCS Cyberattack

New to ClassAction.org? Read our Newswire Disclaimer

Comcast Cable Communications faces a proposed class action lawsuit over a data breach experienced earlier this year by Financial Business and Consumer Solutions (FBCS), a third party that Comcast uses to collect unpaid bills from customers.

Get class action lawsuit news sent to your inbox – sign up for ClassAction.org’s free weekly newsletter.

The 51-page data breach lawsuit says that FBCS announced in April of this year that certain systems in its network had been accessed without authorization between February 14 and February 26, 2024. In data breach notices sent around August 16, Comcast stated that it had learned of the FBCS data breach on March 13, but that the debt collection agency did not inform Comcast that its customer datawas involved in the cyberattack until July 17, the complaint relays.

Related Reading: Comcast Data Breach Lawsuits – October 2024

Per the suit, FBCS confirmed in a filing with the Office of the Maine Attorney General that the information of 4,253,394 people was exposed in the data breach. In its own filing with the Maine Attorney General, Comcast, one of the largest telecom companies nationwide, confirmed that more than 237,000 customers were impacted by the FBCS data breach, the suit states.

The class action suit accuses Comcast of failing to appropriately protect consumers’ sensitive information from unauthorized disclosure, alleging the company failed to so much as encrypt or redact customer details and properly vet third-party vendors such as FBCS.

“This unencrypted, unredacted [personally identifiable information] was compromised due to Defendants’ negligent and/or careless acts and omissions and their utter failure to protect their customers’ sensitive data,” the filing charges.

According to the Comcast data breach notice, consumers’ names, addresses, Social Security numbers, dates of birth, and Comcast account and ID numbers used internally at FBCS were compromised in the cyberattack. The notice says that the compromised data from victims dates back to around 2021.

Omitted from the data breach notice are details about the root cause of the hack and the remedial measures taken to ensure such an incident does not happen again, the lawsuit mentions.

“This ‘disclosure’ amounts to no real disclosure at all, as it fails to inform, with any degree of specificity, Plaintiff and Class Members of the Data Breach’s critical facts,” the suit argues. “Without these details, Plaintiff’s and Class Members’ ability to mitigate the harms resulting from the Data Breach is severely diminished.”

The Comcast data breach lawsuit looks to cover all United States residents whose personally identifiable information was compromised in the data breach, including those who received notice from Comcast.

Are you owed unclaimed settlement money? Check out our class action rebates page full of open class action settlements.