HackingTelecom & MediaTechnologyInformationVulnerability ExploitStolen CredentialsData ExfiltratedCustomer Data InvolvedDelayed DiscoveryAuthenticationCredentialsIdentity (basic)Government IDCriticalContained

COMCAST CABLE COMMUNICATIONS, LLC

bd_cf68c61c04a06b88 · schema v1 · pii pii-v1

Severity

Critical

Discovered

Oct 25, 2023

Filed

Dec 18, 2023

To disclose

8 weeks

Affected

3,100,608state residents only

Linked

8 filings

Confidence

71%

Full breach record for COMCAST CABLE COMMUNICATIONS, LLC →5 incidents on file

Comcast Cable Communications LLC reported a cybersecurity incident involving unauthorized access to internal systems via a Citrix vulnerability between Oct 16-19, 2023. The breach impacted approx. 3.1M individuals, exposing usernames, hashed passwords, names, DOBs, and SSNs. Comcast notified law enforcement, patched the vulnerability, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Washington clock⏱ WA AG >30d8 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 9 days

discovery → filing · 8 weeks / 54 days

Oct 16, 2023

Begins

Oct 25, 2023

Discovered

Dec 18, 2023

Filed

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Vermont State AGbd_3823dc42ff458d5a2023-12-18Verified
California State AGbd_9483a5f6ebb2a4932023-12-18Verified
Maine State AGbd_d0e6f01e879a45062023-12-18Verified
Oregon State AGbd_e1e3e7f42684ebc92023-12-18Verified

Show 3 more filings ↓up to 39d gap

Indiana State AGbd_62f3f759d84e3a662024-01-26 · +39dVerified
Massachusetts State AGbd_7804b41a61024f392024-01-26 · +39dVerified
Maine State AGbd_7ffaf039f7f863fd2024-01-26 · +39dVerified by operator

Name: HOLLAND & KNIGHT LLP
norm: holland knight

Name: COMCAST CABLE COMMUNICATIONS, LLC
norm: comcast cable communications
Industry: Telecom & MediallmTechnologyllm

Discovered: Oct 25, 2023
Breach occurred: Oct 16, 2023 – Oct 19, 2023
Undetected for: 9 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 18, 2023
Affected individuals: 3,100,608state-resident count only
Data types: Identity (basic)Government IDCredentials
Data elements: NameSocial Security numberDate of birthUsername + password
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found after the fact
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified Washington Office of the Attorney General
Initial access: exploit_public_facing

During the incident: Notified federal law enforcement
Conducted an investigation into the nature and scope of the incident
Promptly patched and mitigated the Citrix vulnerability within its systems
Proactively asked customers to reset their password
Offered customers 24 months of complimentary credit monitoring and identity restoration services through IDX
Changes made: Offered customers 24 months of complimentary credit monitoring and identity restoration services through IDX
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(54 days from discovery to filing)
Compliance flags: WA AG >30d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 7 states

View merged incident ↗

Vermont State AGDec 18 · first

California State AGDec 18 · first

Maine State AGDec 18 · first

Oregon State AGDec 18 · first

Washington State AGDec 18 · first · this page

Indiana State AG+39d

Massachusetts State AG+39d

Maine State AG+39d

Pattern: first filing Dec 18 (VT), last Jan 26 (ME) — a 39-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA27287.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 18, 2023
Raw hash: 15e6ebb8e56a0fc7168425b0bf62fec6f03e07df9523f806998b64ca320e57b7

Linked disclosures

Regulatory filings (7) · sorted by filing gap

Reporting entityHOLLAND & KNIGHT LLP

Victim entityCOMCAST CABLE COMMUNICATIONS, LLC

Incidentdiscovered Oct 25, 2023

Stated responseNotified federal law enforcement

ComplianceWA AG >30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com