News and Analysis

Comcast’s Xfinity experienced a “data security incident” between 16-19 October 2023, affecting nearly 36 million people due to a flaw in software from cloud computing firm Citrix. The breach exposed usernames, passwords, contact information, partial social security numbers, and other data. Despite patching the vulnerability, suspicious activity was detected on Xfinity’s internal systems. The company is asking customers to change their passwords and enable two-factor authentication.