COMCAST CORP Incident Report - 2023-12-18

Page last updated on February 29, 2024

A potential incident was reported for COMCAST CORP on 2023-12-18.

Material Incident Disclosed?

A Material Cybersecurity Incident 8-K has not been filed.

Incident Report

2023-12-18

Comcast suffered a data breach affected over 35.8 million customers due to a Citrix vulnerability announced on Oct 10, 2023. The attacker gained unauthorized access between October 16 and October 19, 2023.

After additional review of the affected systems and data, Xfinity concluded on December 6, 2023, that the customer information in scope included usernames and hashed passwords; for some customers, other information may also have been included, such as names, contact information, last four digits of social security numbers, dates of birth and/or secret questions and answers. However, the data analysis is continuing.
Source: Comcast Press Release - posted by Andrew Hoog at 2024-02-29 16:17:50 EST

2023-12-18

Total number of persons affected (including residents): 35,879,455
Source: Maine Attorney General - posted by Andrew Hoog at 2024-02-29 16:20:31 EST

Company Information