Comcast Xfinity

Disclosed Dec 18, 202335,800,000 affectedConfirmed

CitrixBleed exploit exposes data of about 36 million Xfinity customers

Attackers exploiting the CitrixBleed flaw in Citrix NetScaler were inside Xfinity systems from October 16 to 19, 2023. Comcast said usernames and hashed passwords were taken, plus for some customers names, contact data, dates of birth, partial Social Security numbers and security questions; its Maine filing put the total near 35.8 million.

What is known

People affected	35,800,000 (as reported by the organization)
Disclosed	Dec 18, 2023
Discovered	Oct 25, 2023
Attack	Hacking
Data exposed	NamesEmailsPhone numbersAddressesDates of birthSocial Security numbersCredentials and tokens
Sector	Telecom · US
Status	Confirmed

Sources

Regulatoroag.ca.gov

California AG data breach notice: Comcast Cable Communications LLC

Newstechcrunch.com

Comcast says hackers stole data of close to 36 million Xfinity customers

Notices filed

TotalDec 18, 2023

Research35,800,000 people

History of this record

Added2026-09-25

First recordedby seedSource

First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.

Everything about Comcast Xfinity