Xfinity

Xfinity (Comcast Cable) disclosed a data security incident involving unauthorized access to internal systems via a Citrix software vulnerability between October 16-19, 2023. The breach exposed usernames, hashed passwords, and for some customers, names, contact info, last four SSN digits, and dates of birth. Xfinity patched systems, reset passwords, and notified law enforcement. This notice covers Delaware, New York, and North Carolina residents.

Xfinity (Comcast Cable Communications LLC) notified Delaware residents of a data breach involving unauthorized access to internal systems via a Citrix software vulnerability between October 16-19, 2023. The incident exposed names, Social Security numbers, and driver's license numbers. Xfinity patched the vulnerability, notified law enforcement, and offered 24 months of credit monitoring and identity restoration services through IDX.