The Maine Office of the Attorney General reported a data breach involving Comcast Cable Communications LLC, which occurred from October 16 to October 19, 2023, due to unauthorized access following a vulnerability in a software product used by Xfinity's provider, Citrix. The breach affected approximately 35,879,455 individuals, potentially exposing usernames, hashed passwords, names, contact information, last four digits of social security numbers, dates of birth, and secret questions and answers. The breach was discovered on December 6, 2023, and notifications were sent on December 18, 2023.
TPRM report: https://www.rankiteo.com/company/comcast
"id": "com051072425",
"linkid": "comcast",
"type": "Breach",
"date": "10/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '35,879,455',
'industry': 'Telecommunications',
'name': 'Comcast Cable Communications LLC',
'type': 'Company'}],
'attack_vector': 'Unauthorized Access',
'data_breach': {'number_of_records_exposed': '35,879,455',
'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['usernames',
'hashed passwords',
'names',
'contact information',
'last four digits of social '
'security numbers',
'dates of birth',
'secret questions and answers']},
'date_detected': '2023-12-06',
'date_publicly_disclosed': '2023-12-18',
'description': 'The Maine Office of the Attorney General reported a data '
'breach involving Comcast Cable Communications LLC, which '
'occurred from October 16 to October 19, 2023, due to '
'unauthorized access following a vulnerability in a software '
"product used by Xfinity's provider, Citrix. The breach "
'affected approximately 35,879,455 individuals, potentially '
'exposing usernames, hashed passwords, names, contact '
'information, last four digits of social security numbers, '
'dates of birth, and secret questions and answers. The breach '
'was discovered on December 6, 2023, and notifications were '
'sent on December 18, 2023.',
'impact': {'data_compromised': ['usernames',
'hashed passwords',
'names',
'contact information',
'last four digits of social security numbers',
'dates of birth',
'secret questions and answers']},
'references': [{'source': 'Maine Office of the Attorney General'}],
'title': 'Comcast Data Breach',
'type': 'Data Breach',
'vulnerability_exploited': 'Vulnerability in Citrix software product'}