Xfinity 2023 Data Breach: 35.9 Million Customer Records Exposed

The Xfinity breach demonstrated the danger of delayed patch application. Attackers exploited unpatched Citrix systems just days after the patch was released. The 35.9 million affected customers represent virtually all Xfinity internet subscribers.

The breach at Xfinity/Comcast exposed 35.9 million records through exploitation of citrix bleed vulnerability (cve-2023-4966). 35.9 million Xfinity customers The incident highlights the ongoing challenges organizations face in protecting sensitive user data against increasingly sophisticated attack vectors. Security researchers have noted that breaches of this magnitude often result from a combination of technical vulnerabilities and organizational failures in security practices.

Current status: 35.9 million customers notified; class action lawsuits filed. Affected users should take immediate steps to protect their accounts, including changing passwords, enabling multi-factor authentication, and monitoring financial accounts for unauthorized activity. Filing a DSAR with Xfinity/Comcast can help you understand what data was exposed and request its deletion.