Comcast's Xfinity flags data breach

[Y2kTheNewOldies]

https://www.reuters.com/technology/cybersecurity/comcasts-xfinity-flags-data-security-incident-2023-12-18/

The unauthorized access led to customer information that was "likely acquired", including usernames, hashed passwords, contact details and last four digits of social security numbers, the company said.


The data breach was due to a Citrix software vulnerability, the company said, adding that the software-related risk was now resolved.

Comcast Discloses Hackers May Have Stolen Data on 35.9 Million Xfinity Customers

Comcast said personal data for 35.9 million Xfinity customers was illegally accessed in a security breach that occurred in October.

variety.com

Note the breach affects 36 million customers in this follow up.

 

[JeeperOne]

And to think they preach to us about the need to keep OUR network secure

Now hopefully this will teach them to STFU & PRACTICE what they PREACH for once

 

[Mark Roberts]

And to think they preach to us about the need to keep OUR network secure

Now hopefully this will teach them to STFU & PRACTICE what they PREACH for once

Far be it from me to defend Xfinity/Comcast, which is a company I don't much care for, but I've had experience with configuring Citrix servers and they can be very hard to secure. The basic problem has been that Citrix has numerous defaults that are insecure and not really appropriate for a platform intended to provide screen access only. For example, at least once upon a time, the Citrix default was to allow Windows drivers on the secure side of the connection to be mounted through the Citrix server...which defeats the purpose of the server to begin with. Possibly that has changed. One has to nail down all the configuration settings, and it's easy to miss one.

Xfinity/Comcast does have a robust two-factor authentication platform, although their messaging around it can be unclear to a consumer-grade user. They are doing the right thing by encouraging people to use it for logging into the Xfinity/Comcast management/email portal. They probably should make it the default but likely they're concerned about the customer support calls that would be triggered as a result.