Xfinity breach via Citrix Bleed: 35.9M customers
Xfinity (Comcast)
Comcast's Xfinity said attackers used Citrix Bleed (CVE-2023-4966) on its NetScaler devices between Oct 16 and 19, 2023, before mitigation, and took usernames and hashed passwords. Some customers also lost names, contact details, last four SSN digits, birth dates and security questions. A Maine filing put the count at 35,879,455.
Why this severity: Data breach of 35.9M customer records via an unpatched-in-time Citrix Bleed device
- Started
- Oct 16, 2023
- Closed
- Dec 18, 2023
Affected
Not published yet
Fixed in
No fixed release yet
Updates by day4
▸Dec 18, 2023
Link #Public notice; customers are forced to reset passwords
Source
▸Dec 6, 2023
Link #Xfinity concludes usernames and hashed passwords were taken
▸Nov 16, 2023
Link #Xfinity determines customer information was likely acquired
▸Oct 16, 2023
Link #Unauthorized access to Xfinity internal systems begins (through Oct 19), per Xfinity's notice
Source
Advisories1
News & write-ups2
Notes & caveats
Related: citrix-bleed-netscaler-cve-2023-4966.
Get an email when a new major security incident drops. No spam, unsubscribe any time.
