Comcast says hackers stole data of close to 36 million Xfinity customers

Comcast confirmed that attackers exploited the critical "CitrixBleed" vulnerability to access Xfinity internal systems between October 16–19, 2023, and likely exfiltrated sensitive customer PII affecting approximately 35.8 million customers; patches were available in early October but many organizations remained unpatched, and Comcast is requiring password resets and recommending MFA.