HackingTechnologyInformationCustomer Data InvolvedGovernment IDIdentity (basic)HighContained

COMCAST CABLE COMMUNICATIONS, LLC

bd_7ffaf039f7f863fd · schema v1 · pii pii-v1

Severity

High

Discovered

Jan 18, 2024

Filed

Jan 26, 2024

To disclose

8 days

Affected · nationwide

2,3022 in this filing

Linked

8 filings

Confidence

66%

Full breach record for COMCAST CABLE COMMUNICATIONS, LLC →5 incidents on file

Comcast Cable Communications LLC reported a supplemental state-agency data breach notice to the Maine Attorney General. The incident, occurring between October 16 and 19, 2023, involved an external system breach (hacking) discovered on January 18, 2024. The breach impacted 2,302 individuals, including 2 Maine residents, whose Social Security numbers and/or driver's license numbers were compromised. Comcast provided 24 months of credit monitoring and identity restoration services to affected individuals.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Jan 18, 2024 → Filed with AG Jan 26, 20248d ✓ ME AG ≤30d8 days discovery → filing

Incident timeline

undetected · 94 days

discovery → filing · 8 days

Oct 16, 2023

Begins

Jan 18, 2024

Discovered

Jan 26, 2024

Filed

vs. sector median

18 wks faster

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Indiana State AGbd_62f3f759d84e3a662024-01-26Verified
Massachusetts State AGbd_7804b41a61024f392024-01-26Verified
Vermont State AGbd_3823dc42ff458d5a2023-12-18 · +39dVerified
California State AGbd_9483a5f6ebb2a4932023-12-18 · +39dVerified

Show 3 more filings ↓up to 39d gap

Washington State AGbd_cf68c61c04a06b882023-12-18 · +39dCandidate
Maine State AGbd_d0e6f01e879a45062023-12-18 · +39dVerified
Oregon State AGbd_e1e3e7f42684ebc92023-12-18 · +39dVerified

Name: COMCAST CABLE COMMUNICATIONS, LLC
norm: comcast cable communications

Name: COMCAST CABLE COMMUNICATIONS, LLC
norm: comcast cable communications
Industry: Technologyllm

Discovered: Jan 18, 2024
Breach occurred: Oct 16, 2023 – Oct 19, 2023
Undetected for: 94 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 26, 2024
Affected individuals: 2,302state + nationwide
Data types: Government IDIdentity (basic)
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Submitted supplemental notice to Maine Attorney General's office
Initial access: exploit_public_facing

During the incident: Provided 24 months of credit monitoring and identity restoration services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 days(8 days from discovery to filing)
Compliance flags: ME AG ≤30d · 8d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jan 18, 2024
→ Filed with AG: Jan 26, 2024
8d 30 days ME AG ≤30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jan 18, 2024 → Filed with AG: Jan 26, 2024	8d	30 days	ME AG ≤30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 7 states

View merged incident ↗

Vermont State AGDec 18 · first

California State AGDec 18 · first

Washington State AGDec 18 · first

Maine State AGDec 18 · first

Oregon State AGDec 18 · first

Indiana State AG+39d

Massachusetts State AG+39d

Maine State AG+39d · this page

Pattern: first filing Dec 18 (VT), last Jan 26 (ME) — a 39-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/202cb122-b4e6-42fd-b9b5-59e59d44d4fe.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 26, 2024
Raw hash: eb1cc3920a6e9563eef41a05cf9b3935bb1f9a015c88f78734a9fd7fc22b3987

Linked disclosures

Regulatory filings (7) · sorted by filing gap

Reporting entityCOMCAST CABLE COMMUNICATIONS, LLC

Victim entityCOMCAST CABLE COMMUNICATIONS, LLC

Incidentdiscovered Jan 18, 2024

Stated responseProvided 24 months of credit monitoring and identity restoration services

ComplianceME AG ≤30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov