Millions of Xfinity customers' info, hashed passwords feared stolen in cyberattack

Comcast Xfinity suffered unauthorized access to internal systems (Oct 16–19, 2023) attributed to exploitation of the Citrix Bleed vulnerability; an estimated 35.9 million user IDs were likely accessed and data potentially stolen including usernames, hashed passwords, contact details, some PII (dates of birth, last four SSN digits) and security question-answers, with evidence of mass exploitation and ransomware actors attempting to monetize the flaw.