Comcast is notifying Xfinity customers of adata breachthat exposed hashed passwords and usernames.
Hackers may have also acquired birthdays and the last four digits of social security numbers.
This breach could affect35,879,455 customers, according to Comcast’s filing with the Maine attorney general.
Hannah Stryker / How-To Geek
This data breach is still under investigation, and some of the details are unclear.
Comcast says that the hackers exploited a vulnerability known as “CitrixBleed” (CVE-2023-4966).
Cybersecurity personnel at Xfinity detected the breach on October 25th during a “routine cybersecurity exercise.”
Rumors of a data breach began circulating on social media around this time.
But the data breach may go beyond usernames and hashed passwords.
Current and former Xfinity customers should log into the Xfinity website and change their password.
Source:Xfinity,Office of the Maine Attorney GeneralviaReuters
