DMV Misc (Parking-Telecom) · Telecom (business) · Data breach
Comcast Business
Headline
Same 2023 breach as residential Xfinity, documented in the Internet Providers tab - and the reason it deserves its own row is that the affected population is different.
Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.
Same 2023 breach as residential Xfinity, documented in the Internet Providers tab - and the reason it deserves its own row is that the affected population is different. Small businesses on Comcast Business hold their customers' data behind that connection, so a breach at the ISP layer reaches a nonprofit's donor list or a medical practice's patient records indirectly. Small business owners also generally have no IT staff, receive the same consumer-style notification, and have downstream notification obligations of their own that they may not know exist.
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-08-04
Primary source. None recorded — Unverified - heuristic first draft.
Terms
Arbitration
Not independently confirmed this pass for Comcast Business's specific commercial Terms of Service.
Data sharing
SAME 2023 BREACH as residential Xfinity (Internet Providers tab): the Comcast/Citrix Netscaler breach (Oct 16-19, 2023) exposed usernames, passwords, contact information, partial SSNs, birthdates, and security questions for an estimated 35.8 MILLION current/former Comcast customers — resulting in a $117.5 MILLION settlement (final approval granted Aug. 20, 2026; claims deadline Sept. 14, 2026, now passed), offering up to $10,000 for documented losses or a $50 flat payout. Not confirmed whether this specific settlement's class definition includes COMCAST BUSINESS accounts specifically as distinct from residential Xfinity accounts — recommend direct verification.
Fees and billing
SEPARATE, UNRELATED B2B LITIGATION (Feb 2026): Comcast Business Communications sued DISH Wireless (EchoStar) for $54 MILLION, alleging DISH breached a Master Service Agreement covering fiber connections for DISH's 5G network — DISH argues its performance was 'excused' after the FCC forced it to sell the spectrum underlying that 5G network, a force majeure argument. This is a business-to-business commercial dispute, NOT a customer-privacy issue, but relevant context on Comcast Business's broader legal footprint.
Contacts
Privacy contact. Not recorded.
Legal notice. PUBLIC COMPANY (CMCSA). Service route: c/o General Counsel / Corporate Secretary, Philadelphia, Pennsylvania — the corporate address on the SEC Form 10-K cover page is the official address of record. Confirm the exact street address on the current 10-K at sec.gov/edgar, and check the state-of-incorporation registered agent (usually Delaware; most large filers use The Corporation Trust Company or Corporation Service Company) via the Secretary of State business-entity search. A registered agent MUST accept service, which is why it is the reliable channel when a company publishes no privacy address.
Mailing address. Not recorded.
Evidence
No claims have been itemized for this row yet.
No sources are on file for this row yet.
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy business.comcast.com/privacy-policy | Not fetched yet | NO (HTML only) |
| Terms of service business.comcast.com/terms-of-service | Not fetched yet | NO (HTML only) |
| Website comcast.com | Not fetched yet | — |
| Primary source No URL recorded Verification: Unverified - heuristic first draft | Not fetched yet | — |
Enforcement
No enforcement actions are linked to this row.
State statute
No comprehensive state privacy statute on file for Pennsylvania