Vendor dossier // business.comcast.com
Also known as Comcast Corporation · Xfinity · Comcast Business
Philadelphia, Pennsylvania, United States · insufficient public data employees
Key people
Last updated: Jul 29, 2026, 07:47 PM · Partial / limited public data
Conditional
Comcast faces Elevated Risk due to multiple recent data breaches affecting hundreds of thousands to millions of customers, including a 2023 Xfinity breach and… Limited public data — verify before relying.
Risk Tier
Risk Score
Confidence
partial
Material Incidents
Comcast Corporation is a global media and technology company headquartered in Philadelphia, Pennsylvania. It operates through major brands including Xfinity, Comcast Business, NBCUniversal, and Sky, delivering broadband, wireless, video, and entertainment services to hundreds of millions of customers worldwide. In 2025, the company reported $123.7 billion in revenue and $20 billion in net income. Leadership includes Chairman and co-CEO Brian L. Roberts, co-CEO Michael J. Cavanagh, and CFO Jason S. Armstrong. The firm has also announced plans to separate its media and technology businesses.
Comcast Business delivers enterprise networking and managed security services, including SD-WAN, SASE, managed WiFi, and comprehensive cybersecurity solutions. Its ActiveCore platform provides centralized performance data and troubleshooting capabilities for enterprise operations. The company partners with technology leaders like Cisco to deploy the Meraki Technology Stack for unified cloud-native network management. Security offerings feature Managed Detection and Response (MDR) alongside a dedicated Security Operations Center (SOC) staffed by industry-certified analysts for real-time threat monitoring and mitigation across multiple distributed sites globally.
Comcast Business maintains a multi-layer security program aligned with NIST 800-53, PCI-DSS, and ISO 27001 standards. Its Information Security Program focuses on protecting customer data, monitoring systems, and managing business continuity. The company publishes Technical and Organizational Measures (TOMs) for data processing and maintains a formal plan for security incident management and response. Despite these documented frameworks, recent high-profile breaches and regulatory settlements highlight ongoing challenges in securing customer PII and managing third-party vendor risks effectively.
[legal] Class Action Settlement Approval
Preliminary court approval granted for $117.5 million settlement covering cash payouts and identity protection services.
Jan 16, 2026, 12:00 AM · Source
[breach] Vendor Data Breach
Third-party debt collection agency breach compromised over 237,000 broadband customer records.
Feb 14, 2024, 12:00 AM · Source
[breach] Xfinity Data Breach
Exposed personal information of millions of customers, leading to allegations of inadequate data security.
Dec 1, 2023, 12:00 AM · Source
[legal] FCC Regulatory Settlement
FCC settlement regarding vendor breach affecting subscriber personally identifiable information.
- · Source
Vendors offering a similar product or service - for side-by-side comparison, not a ranking.
Capgemini
NTT Security Holdings
Optiv
Recent news highlights significant cybersecurity and legal developments for Comcast. A 2023 data breach exposed Xfinity customer data, leading to a $117.5 million class-action settlement approved in early 2026. Additionally, a 2024 vendor breach compromised over 237,000 broadband customers' information, resulting in an FCC settlement. The company continues to publish annual cybersecurity threat reports and promotes enterprise security solutions, though the legal and regulatory fallout from the breaches remains a prominent focus for stakeholders, regulators, and industry observers.
Content in this section is vendor-supplied and does not alter Vendorisk.ai's risk tier or evaluation.
No input sources recorded · Generated Jul 29, 2026, 07:47 PM
Every verdict stores the public sources retrieved for this run. Read our methodology.
No input sources were recorded for this evaluation.
AI-generated assessment based on publicly available sources. Verify critical findings before contractual reliance. Analysis is advisory, not a compliance attestation, and is subject to data availability.
Years in Business
-
Comcast faces Elevated Risk due to multiple recent data breaches affecting hundreds of thousands to millions of customers, including a 2023 Xfinity breach and a 2024 vendor compromise. These incidents resulted in a $117.5 million class-action settlement and an FCC regulatory settlement. While Comcast maintains a documented security program aligned with NIST and ISO standards, the scale of the breaches, ongoing litigation, and regulatory scrutiny regarding data protection practices warrant a conservative risk assessment.