\n<\/p>\n
Xfinity is notifying customers of a \u201cdata security incident\u201d it says resulted in the theft of customer information, including usernames, passwords, contact information, and more. In a notice on Monday<\/a>, Xfinity says \u201cthere was unauthorized access\u201d to its systems from October 16th to October 19th, 2023.<\/p>\n<\/div>\n Xfinity traces the breach to a security vulnerability disclosed by cloud computing company Citrix, which began alerting customers of a flaw in software Xfinity and other companies use on October 10th. While Xfinity says it patched the security hole, it later uncovered suspicious activity on its internal systems \u201cthat was concluded to be a result of this vulnerability.\u201d<\/p>\n<\/div>\n The hack resulted in the theft of customer usernames and hashed passwords, according to Xfinity\u2019s notice<\/a>. Meanwhile, \u201csome customers\u201d may have had their names, contact information, last four digits of their social security numbers, dates of birth, and \/ or secret questions and answers exposed. Xfinity has notified federal law enforcement about the incident and says \u201cdata analysis is continuing.\u201d<\/p>\n<\/div>\n We still don\u2019t know how many users were affected by the breach. Xfinity will automatically ask customers to change their passwords the next time they log in to their accounts, and it\u2019s also encouraging users to turn on two-factor authentication.<\/p>\n<\/div>\n \u201cWe are not aware of any customer data being leaked anywhere, nor of any attacks on our customers,\u201d Xfinity spokesperson Joel Shadle says in an emailed statement to The Verge<\/em>.\u00a0\u201cWe take the responsibility to protect our customers very seriously and have our cybersecurity team monitoring 24×7.\u201d<\/p>\n<\/div>\n You can find the full notice, including contact information for the company\u2019s incident response team, on Xfinity\u2019s website<\/a>.<\/p>\n<\/div>\n