Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Data Breaches

Xfinity Data Breach Impacts 36 Million Individuals

The recently disclosed Xfinity data breach, which involved exploitation of the CitrixBleed vulnerability, impacts 36 million individuals

Xfinity data breach

The data breach disclosed recently by Comcast’s Xfinity impacts nearly 36 million individuals, the company told US authorities.

The incident was disclosed by the telecommunications and smart home solutions provider on December 18, when it admitted that hackers gained access to customer usernames and hashed passwords, as well as names, dates of birth, contact information, secret questions and answers, and the last four digits of social security numbers in some cases. 

While the company’s press release and customer notice does not include information on the number of affected individuals, Xfinity told the Maine Attorney General’s Office that the data breach impacts 35,879,455 people.

Comcast recently reported having roughly 32 million customers, which suggests that the data breach could affect all Xfinity customers and possibly employees as well. 

SecurityWeek has reached out to Comcast for clarifications and will update this article if the company responds. 

The attack on Xfinity involved exploitation of a Citrix Netscaler ADC and Gateway vulnerability named CitrixBleed and tracked as CVE-2023-4966. This critical vulnerability can allow hackers to hijack existing sessions and gain access to the targeted organization’s systems. 

Citrix announced the availability of patches on October 10, but the vulnerability had been exploited as a zero-day since at least August. Mass exploitation of CitrixBleed started a few weeks after the fixes were released. 

Xfinity said it “promptly” installed the patches, but discovered on October 25 that malicious actors had exploited CitrixBleed to gain access to its systems between October 16 and 19. 

Advertisement. Scroll to continue reading.

The company has required customers to change their passwords following the discovery of the intrusion. 

CitrixBleed is believed to have been exploited in attacks against many high-profile organizations, including Toyota.

Related: Exploitation of Critical ownCloud Vulnerability Begins

Related: Citrix, Gov Agencies Issue Fresh Warnings on CitrixBleed Vulnerability

Related: Ransomware Group Leaks Files Allegedly Stolen From Boeing

Written By

Eduard Kovacs (@EduardKovacs) is a managing editor at SecurityWeek. He worked as a high school IT teacher for two years before starting a career in journalism as Softpedia’s security news reporter. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

Former DoD CISO Jack Wilmer has been named CEO of defensive and offensive cyber solutions provider SIXGEN.

Certificate lifecycle management firm Sectigo has hired Jason Scott as its CISO.

The State of Vermont has appointed John Toney as the state’s new CISO.

More People On The Move

Expert Insights

Related Content

Data Breaches

OpenAI has confirmed a ChatGPT data breach on the same day a security firm reported seeing the use of a component affected by an...

Cybercrime

Zendesk is informing customers about a data breach that started with an SMS phishing campaign targeting the company’s employees.

Data Breaches

LastPass DevOp engineer's home computer hacked and implanted with keylogging malware as part of a sustained cyberattack that exfiltrated corporate data from the cloud...

CISO Strategy

Okta is blaming the recent hack of its support system on an employee who logged into a personal Google account on a company-managed laptop.

Data Breaches

Delta Dental of California says over 6.9 million individuals were impacted by a data breach caused by the MOVEit hack.

Data Breaches

Sony shares information on the impact of two recent unrelated hacker attacks carried out by known ransomware groups. 

Data Breaches

A group of hackers has leaked Atlassian employee records and floorplans, information that was obtained from third-party workplace platform Envoy.

Data Breaches

AT&T is notifying millions of wireless customers that their CPNI was compromised in a data breach at a third-party vendor.