Comcast Details

    Organization Logo

    Comcast

    Philadelphia, Pennsylvania • 186000 employees • Telecommunications

    Industry

    Telecommunications

    Security Incidents

    2

    Comcast Corporation, founded in 1963, is a multinational telecommunications conglomerate based in Philadelphia, Pennsylvania. It is one of the largest providers of cable TV and Internet services in the United States, operating under the Xfinity brand for its cable communications services. Beyond its core telecommunications operations, Comcast also owns and operates NBCUniversal, a significant player in the media and entertainment industry, which includes news, entertainment, and sports broadcasting networks, motion picture companies, and theme parks.

    Security Incidents

    Comcast Breach of Feb 2024
    Severity Score
    Significant to High

    Type

    Ransomware Attack

    Summary

    In February 2024, Financial Business and Consumer Solutions (FBCS), a debt collection agency, was targeted by a ransomware attack, leading to the compromise of sensitive data belonging to several companies' customers, including Comcast and Truist Bank. The breach occurred when an unauthorized party accessed FBCS's computer network, downloaded data, and encrypted systems as part of the ransomware attack. Comcast, despite initially being informed in March 2024 that its customer data was safe, found out in July 2024 that the personal information of 237,703 of its customers was actually compromise...
    Show more

    Severity

    The cyber incident involving Financial Business and Consumer Solutions (FBCS) is quite significant due to the magnitude of sensitive data exposed and the repercussions felt by major entities such as Comcast and Truist Bank. This breach, resulting from a ransomware attack between February 14 and February 26, 2024, led to the compromise of personal information of over 4.2 million individuals, including Social Security numbers, dates of birth, and account details. Comcast later disclosed that approximately 237,703 of its customers were affected, with similar disclosures about Truist Bank clients,...
    Show more

    Impact

    The cyber incident involving Comcast was a data breach linked to a ransomware attack on its former third-party debt collection service provider, Financial Business and Consumer Solutions (FBCS). Sensitive data belonging to 237,703 of Comcast's customers, including names, addresses, Social Security numbers, dates of birth, as well as Comcast account and internal ID numbers, was exfiltrated. Fortunately, neither Comcast’s own systems nor those of its broadband unit, Xfinity, were compromised in this breach.

    There is no indication that the stolen data has been misused as of yet, but the potentia...
    Show more
    Comcast Breach of Dec 2023
    Severity Score
    Significant to High

    Type

    Zero-Day Exploit

    Summary

    In mid-October 2023, Comcast's Xfinity service suffered a massive data breach affecting nearly 36 million accounts due to an unpatched vulnerability in Citrix software. Hackers accessed sensitive information including usernames, partially obscured social security numbers, birth dates, and contact details. Despite discovering the vulnerability earlier, Xfinity only patched it after the data was compromised, leading to widespread concern and legal action.

    Severity

    The Comcast Xfinity data breach was highly severe, impacting nearly 36 million customers by exposing sensitive personal information such as birth dates and partial social security numbers. The breach was caused by a delayed response to a known security flaw, which allowed hackers easy access to the data. This has raised serious concerns about the company's security practices and led to multiple lawsuits, underlining the extensive potential for customer harm.

    Impact

    The Comcast Xfinity data breach in October 2023 significantly impacted nearly 36 million customers, exposing their personal and sensitive information. Affected data included usernames, contact details, birth dates, and the last four digits of social security numbers, raising the risk of identity theft and fraud for those involved. The breach has led to legal challenges and widespread criticism of Comcast's security measures, underscoring the serious consequences for both the company and its customers.

    KEEP YOUR ENVIRONMENT SECURE

    Weak credentials are the leading cause of breaches. Beyond Identity can help.

    See MFA exploits in action
    Watch how adversaries exploit companies in quick videos