Xfinity

Summary

Comcast revealed that nearly 36 million Xfinity customers’ information was exposed due to a cyberattack against their systems. The company was targeted via Citrix vulnerability – referred to as Citrix Bleed and tracked as CVE-2023-4966 – that allowed unauthorized threat actors to access and exfiltrate data from their systems. The data exposed may have included usernames and hashed passwords, names, contact information, last four digits of Social Security numbers, dates of birth, and secret questions and answers. As a result of the incident, Comcast forced password resets for all Xfinity accounts and highly encouraged enabling multi-factor authentication.