2023 CitrixBleed — 35.8M Xfinity customers
Data compromised
Usernames, hashed passwords, names, contact info, last 4 SSN, dates of birth, security questions and answers
Technical writeup
Exploitation of critical Citrix vulnerability (CitrixBleed) in Xfinity systems. Unauthorized access October 16–19, discovered October 25. Usernames, hashed passwords, names, last 4 of SSN, DOB, security Q&A. Xfinity required password resets.
Root cause
CitrixBleed vulnerability; Citrix software exploited before patch.