Vendor dossier // corporate.comcast.com
Also known as Comcast Cable Communications · Xfinity · Comcast Holdings
Philadelphia, Pennsylvania · About 180,000 employees
Key people
Last updated: Jul 29, 2026, 06:03 PM · Partial / limited public data
Conditional
Comcast faces Elevated Risk due to a major 2023 data breach impacting nearly 36 million customers, coupled with a 2024 vendor compromise affecting 237,000… Limited public data — verify before relying.
Risk Tier
Risk Score
Confidence
partial
Material Incidents
Comcast Corporation is a multinational media and technology conglomerate headquartered in Philadelphia, Pennsylvania, founded in 1963. The company operates across forty U.S. states and the District of Columbia, serving as the largest U.S. Internet service provider in 2025. Its portfolio spans residential and business broadband, cable television, wireless services, and media entertainment through subsidiaries like NBCUniversal and Sky. Comcast generates over $123 billion in annual revenue and maintains a public listing on the Nasdaq under the ticker CMCSA. The organization employs approximately 180,000 people and focuses on bridging the digital divide while expanding its converged connectivity and entertainment offerings globally.
Comcast delivers a comprehensive suite of connectivity and entertainment solutions under the Xfinity and Comcast Business brands. Its core offerings include high-speed residential broadband, cable television, voice services, and wireless bundles. For enterprise clients, Comcast Business provides managed networking, cloud connectivity, and the ActiveCore SDN platform, which enables software-defined wide area networking (SD-WAN) to streamline multi-location operations. The company also competes in streaming, advertising, film production, and theme parks. By bundling connectivity with media content, Comcast aims to reduce customer churn while supporting diverse consumer and commercial network requirements.
Comcast maintains a multi-layer security program across its products and services, emphasizing technical and organizational measures to protect customer data. The company states it invests continuously in security protocols, monitoring, and expert teams to detect and mitigate criminal activity. However, its security posture has faced significant scrutiny following major data compromises. While Comcast publishes privacy policies and claims robust defenses, external allegations highlight gaps in network appliance management and third-party vendor oversight. The organization continues to address regulatory expectations and customer trust amid ongoing litigation related to past data exposure incidents.
[legal] $117.5M Data Breach Settlement
Comcast agreed to a massive class-action settlement with claims deadline extended to September 2026.
Sep 14, 2026, 12:00 AM · Source
[legal] Settlement Final Approval Hearing Scheduled
The court is scheduled to hold a Final Approval Hearing for the data breach settlement on August 5, 2026.
Aug 5, 2026, 12:00 AM · Source
[legal] $117.5M Data Breach Settlement
Class action settlement approved to compensate affected customers for expenses and lost time following the 2023 breach.
Jun 14, 2026, 12:00 AM · Source
[legal] $117.5 Million Class Action Settlement Agreed
Comcast agreed to a $117.5 million settlement in January 2026 regarding the 2023 data breach, with claims deadlines extended to September 2026.
Jan 1, 2026, 12:00 AM · Source
Vendors offering a similar product or service - for side-by-side comparison, not a ranking.
AT&T
Major telecommunications and broadband provider
Verizon
Leading fiber and wireless connectivity provider
Charter Communications
Cable broadband and media competitor
Recent news focuses heavily on a massive cybersecurity incident from October 2023 that exposed the personal information of nearly 36 million Xfinity customers due to a Citrix vulnerability. This led to a $117.5 million class-action settlement, with claims deadlines extended into September 2026. Plaintiffs allege inadequate data protection measures. Additionally, a separate 2024 breach involving a third-party vendor, Financial Business and Consumer Solutions, impacted over 237,000 customers. Comcast faces ongoing legal challenges, including lawsuits over debt collection robocalls, while regulators and consumers monitor its remediation efforts and compliance with privacy standards.
Content in this section is vendor-supplied and does not alter Vendorisk.ai's risk tier or evaluation.
No input sources recorded · Generated Jul 29, 2026, 06:03 PM
Every verdict stores the public sources retrieved for this run. Read our methodology.
No input sources were recorded for this evaluation.
AI-generated assessment based on publicly available sources. Verify critical findings before contractual reliance. Analysis is advisory, not a compliance attestation, and is subject to data availability.
Years in Business
-
Comcast faces Elevated Risk due to a major 2023 data breach impacting nearly 36 million customers, coupled with a 2024 vendor compromise affecting 237,000 individuals. The company has agreed to a $117.5 million settlement, with claims processing extending into 2026, indicating prolonged legal and remediation exposure. While Comcast asserts robust security investments, allegations of inadequate data protection and reliance on vulnerable third-party infrastructure highlight persistent vulnerabilities. The combination of material legal liabilities, ongoing settlement administration, and mixed security disclosures warrants an elevated risk classification.
[breach] FBCS Vendor Data Breach
Third-party vendor compromise impacted over 237,000 customer records in 2024.
Oct 10, 2024, 12:00 AM · Source
[breach] FBCS Cyberattack
Third-party financial services breach impacting over 237,000 Comcast customers in 2024.
Oct 10, 2024, 12:00 AM · Source
[breach] Xfinity Citrix Data Breach
Exploitation of Citrix NetScaler vulnerability exposed PII of nearly 36 million customers.
Oct 16, 2023, 12:00 AM · Source
[breach] Xfinity Data Breach via Citrix Vulnerability
Between October 16 and 19, 2023, a third party exploited Citrix NetScaler vulnerabilities to access PII of approximately 36 million Xfinity customers, including usernames, passwords, and partial Social Security numbers.
Oct 16, 2023, 12:00 AM · Source
[breach] Xfinity Data Breach
Unauthorized access to ~36M customer PII via Citrix NetScaler vulnerability between Oct 16-19, 2023.
Oct 16, 2023, 12:00 AM · Source