MalwareTelecom & MediaFinancial ServicesInformationRansomwareCapture Stored DataData ExfiltratedData EncryptedCustomer Data InvolvedSupply Chain (3P Vendor)Identity (basic)Government IDPIICriticalContained

COMCAST CABLE COMMUNICATIONS, LLC

bd_bb4797a206b89eab · schema v1 · pii pii-v1

Severity

Critical

Discovered

Jul 17, 2024

Filed

Oct 3, 2024

To disclose

11 weeks

Affected · nationwide

237,70322 in this filing

Linked

4 filings

Confidence

66%

Full breach record for COMCAST CABLE COMMUNICATIONS, LLC →4 incidents on file

Comcast Cable Communications LLC issued a supplemental notice regarding a ransomware incident at third-party vendor Financial Business and Consumer Solutions, Inc. (FBCS). Unauthorized access occurred Feb 14-26, 2024, resulting in data exfiltration and encryption. FBCS discovered the breach on July 17, 2024. Affected data included names, SSNs, DOBs, and Comcast account numbers. 237,703 individuals affected; 22 in Maine. Comcast is providing 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Jul 17, 2024 → Filed with AG Oct 3, 202478d ⏱ ME AG >30d11 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 154 days

discovery → filing · 11 weeks / 78 days

Feb 14, 2024

Begins

Jul 17, 2024

Discovered

Oct 3, 2024

Filed

This filing is one of 4 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

California State AGbd_ed4a7a4719e575f32024-10-03Verified
New Hampshire State AGbd_d9b34b3f1b410b672024-10-15 · +12dVerified
Indiana State AGbd_764fa3787779b12e2024-07-17 · +78dCandidate

Name: COMCAST CABLE COMMUNICATIONS, LLC
norm: comcast cable communications

Name: COMCAST CABLE COMMUNICATIONS, LLC
norm: comcast cable communications
Industry: Telecom & MediallmFinancial Servicesllm

Discovered: Jul 17, 2024
Breach occurred: Feb 14, 2024 – Feb 26, 2024
Undetected for: 154 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 16, 2024
Affected individuals: 237,703state + nationwide
Data types: Identity (basic)Government IDPII
Data elements: Social Security numberDate of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Filed notice with Maine Attorney General

During the incident: Launched an investigation with the assistance of third-party cybersecurity specialists
Notified the Federal Bureau of Investigation (FBI)
Offering complimentary identity theft protection services for at least 12 months through membership in CyEx Identity Defense Complete
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(78 days from discovery to filing)
Compliance flags: ME AG >30d · 78d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jul 17, 2024
→ Filed with AG: Oct 3, 2024
78d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jul 17, 2024 → Filed with AG: Oct 3, 2024	78d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGJul 17 · first

California State AG+78d

Maine State AG+78d · this page

New Hampshire State AG+90d

Pattern: first filing Jul 17 (IN), last Oct 15 (NH) — a 90-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/aff9fd91-81e8-4d95-a84e-c56f1d48f088.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 3, 2024
Raw hash: d5b02c621cf642bcca8ee06cfef35e97091ba2f22c5aa6de5f210daa3d231b94

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityCOMCAST CABLE COMMUNICATIONS, LLC

Victim entityCOMCAST CABLE COMMUNICATIONS, LLC

Incidentdiscovered Jul 17, 2024

Stated responseLaunched an investigation with the assistance of third-party cybersecurity specialists

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov