Comcast

On December 18, 2023 Comcast's Xfinity broadband unit disclosed a data breach affecting approximately 35.8 million customers, in which attackers exploited the CVE-2023-4966 'Citrix Bleed' vulnerability between October 16-19, 2023. Exposed data included usernames, hashed passwords, partial Social Security numbers, dates of birth, contact information and secret questions/answers. Xfinity disclosed only after a 2-month delay, exposing affected customers to credential-stuffing risk during the gap.

In September 2023 the California Public Utilities Commission and the FCC reached separate settlements with Comcast totaling more than $57 million over allegations Comcast violated California consumer-protection rules around mandatory refunds, billing accuracy and disclosure of fees during 2017-2021. The settlements followed a years-long pattern of state attorneys general filing similar enforcement actions against the cable provider.

Throughout 2017-2018 Comcast was the largest single corporate spender lobbying against the Obama-era Title II net neutrality framework, ultimately helping secure the December 2017 FCC vote (3-2) under chair Ajit Pai to repeal the rules. Comcast spent more than $15M on federal lobbying annually during this period and ran a multi-million-dollar advocacy campaign through industry trade group NCTA. Comcast also led litigation that overturned the FCC's 2010 net neutrality framework in Comcast v. FCC (2010), establishing the legal foundation for the later Title II classification fight.