Comcast Xfinity
Disclosed Dec 18, 20232 years ago35,800,000 affectedConfirmed
CitrixBleed exploit exposes data of about 36 million Xfinity customers
Attackers exploiting the CitrixBleed flaw in Citrix NetScaler were inside Xfinity systems from October 16 to 19, 2023. Comcast said usernames and hashed passwords were taken, plus for some customers names, contact data, dates of birth, partial Social Security numbers and security questions; its Maine filing put the total near 35.8 million.
What is known
| People affected | 35,800,000 (as reported by the organization) |
|---|---|
| Disclosed | Dec 18, 2023 |
| Discovered | Oct 25, 2023 |
| Attack | Hacking |
| Data exposed | Names, Emails, Phone numbers, Addresses, Dates of birth, Social Security numbers, Credentials and tokens |
| Sector | Telecom · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California AG data breach notice: Comcast Cable Communications LLCoag.ca.gov · Regulator | Regulator |
| Comcast says hackers stole data of close to 36 million Xfinity customerstechcrunch.com · News | News |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Dec 18, 2023 | 35,800,000 |
History of this record
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.