In a security setback Comcast, the parent company of Xfinity experienced a concerning incident where they fell victim to a vulnerability known as Citrix Bleed. This unfortunate event resulted in information belonging to 36 million Xfinity customers being exposed to hackers. The vulnerability, which was identified in Citrix networking devices commonly used by corporations had been exploited by cybercriminals since August.

Comcast Logo

It has been confirmed that the hackers took advantage of the Citrix Bleed flaw and managed to access systems between October 16 and October 19. However, it was not, until October 25 that the breach was discovered. The compromised customer data includes usernames hashed passwords, names, contact information, the four digits of social security numbers dates of birth well as secret questions and answers.

Despite Citrix releasing patches in October to address the vulnerability issue it is reported that Comcast took nine days to secure their network against this threat. In response to this incident, Xfinity is strongly urging customers to change their passwords especially if they have been using the same password across multiple platforms. Additionally, Xfinity advises customers to remain vigilant against phishing attempts and is implementing prompts for password changes upon customer login. They are also encouraging customers to utilize two-factor authentication for added security.

Xfinity has promptly reported this incident to law enforcement agencies. Is currently undergoing data analysis, for further investigation. Customers can find information in an official notice sent out by Xfinity which stresses the importance of taking proactive measures in order to mitigate potential risks.

RELATED:

(via)