{
  "site": "https://pwn.watch",
  "generatedAt": "2026-10-22T19:58:23.236Z",
  "tag": {
    "id": "comcast",
    "label": "Comcast",
    "isStack": false,
    "url": "https://pwn.watch/t/comcast",
    "feed": "https://pwn.watch/t/comcast/feed.xml"
  },
  "counts": {
    "incidents": 1,
    "live": 0,
    "notFullyPatched": 0,
    "patched": 1
  },
  "incidents": [
    {
      "slug": "xfinity-citrix-bleed-data-breach-2023",
      "title": "Xfinity breach via Citrix Bleed: 35.9M customers",
      "url": "https://pwn.watch/i/xfinity-citrix-bleed-data-breach-2023",
      "json": "https://pwn.watch/i/xfinity-citrix-bleed-data-breach-2023.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Xfinity (Comcast)",
      "tags": [
        "xfinity",
        "comcast",
        "citrix",
        "citrix-bleed",
        "data-breach"
      ],
      "cveIds": [],
      "affectedVersions": [],
      "fixedVersions": [],
      "startedAt": "2023-10-16",
      "closedAt": "2023-12-18",
      "updatedAt": "2023-12-18",
      "summary": "Comcast's Xfinity said attackers used Citrix Bleed (CVE-2023-4966) on its NetScaler devices between Oct 16 and 19, 2023, before mitigation, and took usernames and hashed passwords. Some customers also lost names, contact details, last four SSN digits, birth dates and security questions. A Maine filing put the count at 35,879,455.",
      "xPost": null
    }
  ],
  "posts": [],
  "changes": [
    {
      "incident": "xfinity-citrix-bleed-data-breach-2023",
      "incidentTitle": "Xfinity breach via Citrix Bleed: 35.9M customers",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-12-18",
      "title": "Public notice; customers are forced to reset passwords",
      "body": null,
      "sourceUrl": "https://www.theverge.com/2023/12/18/24007082/xfinity-data-breach-hack-notice-citrix",
      "url": "https://pwn.watch/i/xfinity-citrix-bleed-data-breach-2023"
    },
    {
      "incident": "xfinity-citrix-bleed-data-breach-2023",
      "incidentTitle": "Xfinity breach via Citrix Bleed: 35.9M customers",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-12-06",
      "title": "Xfinity concludes usernames and hashed passwords were taken",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/xfinity-citrix-bleed-data-breach-2023"
    },
    {
      "incident": "xfinity-citrix-bleed-data-breach-2023",
      "incidentTitle": "Xfinity breach via Citrix Bleed: 35.9M customers",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-11-16",
      "title": "Xfinity determines customer information was likely acquired",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/xfinity-citrix-bleed-data-breach-2023"
    },
    {
      "incident": "xfinity-citrix-bleed-data-breach-2023",
      "incidentTitle": "Xfinity breach via Citrix Bleed: 35.9M customers",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-10-16",
      "title": "Unauthorized access to Xfinity internal systems begins (through Oct 19), per Xfinity's notice",
      "body": null,
      "sourceUrl": "https://assets.xfinity.com/assets/dotcom/learn/Notice%20To%20Customers%20of%20Data%20Security%20Incident.pdf",
      "url": "https://pwn.watch/i/xfinity-citrix-bleed-data-breach-2023"
    }
  ]
}