By Ben Lovejoy
Publication Date: 2026-04-15 11:43:00
Back in 2023, hackers accessed the personal data of 36 million Xfinity customers. Comcast said at the time that the data exposed included names, contact details, and dates of birth. A class action lawsuit followed, and a $117.5 million settlement has now been reached …
The Xfinity data breach
The cybersecurity incident dates back to late 2023.
On October 10, 2023, one of Xfinity’s software providers, Citrix, announced a vulnerability in one of its products used by Xfinity and thousands of other companies worldwide. At the time Citrix made this announcement, it released a patch to fix the vulnerability. Citrix issued additional mitigation guidance on October 23, 2023. We promptly patched and mitigated our systems.
However, we subsequently discovered that prior to mitigation, between October 16 and October 19, 2023, there was unauthorized access to some of our internal systems that we concluded was a result of this vulnerability. We notified federal…
