Comcast's investigation, finalized in December 2023, confirmed that the following information was likely acquired: : Usernames and hashed passwords.
: The last four digits of Social Security numbers and secret security questions/answers. Legal and Financial Aftermath Occurring between October 16 and October 19, 2023,
The major security breach at Comcast's Xfinity subsidiary, which gained significant attention through discussions on platforms like , compromised the personal data of nearly 35.8 million customers . Occurring between October 16 and October 19, 2023, the incident remains one of the largest data exposures for a major U.S. internet service provider. How the Hack Happened : Attackers gained unauthorized access to internal systems,
: Even though Citrix released a patch in early October, hackers—including high-profile ransomware gangs—managed to exploit systems that had not yet been fully mitigated. and dates of birth.
: Attackers gained unauthorized access to internal systems, bypassing typical security measures to exfiltrate sensitive user data. Compromised Customer Information
The breach was traced back to a critical vulnerability known as (CVE-2023-4966).
: Names, contact information, and dates of birth.
Comcast's investigation, finalized in December 2023, confirmed that the following information was likely acquired: : Usernames and hashed passwords.
: The last four digits of Social Security numbers and secret security questions/answers. Legal and Financial Aftermath
The major security breach at Comcast's Xfinity subsidiary, which gained significant attention through discussions on platforms like , compromised the personal data of nearly 35.8 million customers . Occurring between October 16 and October 19, 2023, the incident remains one of the largest data exposures for a major U.S. internet service provider. How the Hack Happened
: Even though Citrix released a patch in early October, hackers—including high-profile ransomware gangs—managed to exploit systems that had not yet been fully mitigated.
: Attackers gained unauthorized access to internal systems, bypassing typical security measures to exfiltrate sensitive user data. Compromised Customer Information
The breach was traced back to a critical vulnerability known as (CVE-2023-4966).
: Names, contact information, and dates of birth.