← Comcast

2023 CitrixBleed — 35.8M Xfinity customers

2023 35.8M records affected Share on X

Data compromised

Usernames, hashed passwords, names, contact info, last 4 SSN, dates of birth, security questions and answers

Technical writeup

Exploitation of critical Citrix vulnerability (CitrixBleed) in Xfinity systems. Unauthorized access October 16–19, discovered October 25. Usernames, hashed passwords, names, last 4 of SSN, DOB, security Q&A. Xfinity required password resets.

Root cause

CitrixBleed vulnerability; Citrix software exploited before patch.

References