ClosedHighPatched
Day · Dec 6, 2023
Xfinity breach via Citrix Bleed: 35.9M customers
Xfinity (Comcast)
Updates on Dec 6, 2023
Xfinity concludes usernames and hashed passwords were taken
Summary
Comcast's Xfinity said attackers used Citrix Bleed (CVE-2023-4966) on its NetScaler devices between Oct 16 and 19, 2023, before mitigation, and took usernames and hashed passwords. Some customers also lost names, contact details, last four SSN digits, birth dates and security questions. A Maine filing put the count at 35,879,455.
Read the full incident →
