Xfinity has issued a notice to its customers regarding a recent breach of data security linked to one of its software providers, Citrix. "We are notifying you of a recent data security incident involving your personal information," said Xfinity in an official announcement. The incident raises significant concerns about data protection and customer privacy.
"We are notifying you of a recent data security incident involving your personal information,"
On October 10, 2023, Citrix identified a vulnerability within one of its products that many companies, including Xfinity, utilize. "At the time Citrix made this announcement, it released a patch to fix the vulnerability," stated the company. Almost two weeks later, between October 16 and October 19, unauthorized access was detected on some of Xfinity's internal systems, attributed directly to this vulnerability.
"At the time Citrix made this announcement, it released a patch to fix the vulnerability,"
"We notified federal law enforcement and conducted an investigation into the nature and scope of the incident," Xfinity explained. As a result of this investigation, the magnitude of the data breach was assessed, leading to the determination that information was likely acquired by unauthorized parties by November 16, 2023.
"We notified federal law enforcement and conducted an investigation into the nature and scope of the incident,"
By the Numbers
On December 6, it was revealed that the compromised information potentially included usernames and hashed passwords. Additionally, for certain customers, more personal data was at risk, such as names, contact details, partial Social Security numbers, birth dates, and answers to security questions. "However, our data analysis is continuing, and we will provide additional notices as appropriate," Xfinity emphasized.
"However, our data analysis is continuing, and we will provide additional notices as appropriate,"
In response to this event, Xfinity is taking immediate steps to enhance security. "To protect your account, we have proactively asked you to reset your password," they stated. Customers will now be prompted to change their passwords when logging into their accounts.
"To protect your account, we have proactively asked you to reset your password,"
Moreover, Xfinity encourages its customers to adopt extra security measures. "We strongly encourage you to enroll in two-factor or multi-factor authentication," the company advised. They also recommend changing passwords on other accounts if customers have reused the same login information elsewhere. Resources for further protecting personal information are available, as Xfinity seeks to ensure customers know how to safeguard themselves during this challenging time.
"We strongly encourage you to enroll in two-factor or multi-factor authentication,"
For those requiring more information, Xfinity has made IDX their incident response provider to manage customer notifications. "If you have additional questions, please contact IDX at 888-799-2560 toll-free," the notice detailed, indicating support hours and additional online resources to help customers through this process.
"If you have additional questions, please contact IDX at 888-799-2560 toll-free,"
Xfinity's statement places a strong emphasis on their commitment to customer security. "We know that you trust Xfinity to protect your information, and we can’t emphasize enough how seriously we are taking this matter," they asserted. The company is actively investing in improved technology and protocols, as well as engaging dedicated experts aimed at strengthening data protection measures.
"We know that you trust Xfinity to protect your information, and we can’t emphasize enough how seriously we are taking this matter,"
As a precautionary step, Xfinity advises all customers to keep a close eye on their accounts and remain aware of potential fraud or identity theft. "You should remain vigilant for incidents of fraud and identity theft by reviewing account statements and monitoring your credit reports," they urged. Customers are entitled to a free annual credit report, encouraging regular monitoring to detect any irregularities.
"You should remain vigilant for incidents of fraud and identity theft by reviewing account statements and monitoring your credit reports,"
Furthermore, the notice discusses the option to place a security freeze on credit reports, which can prevent unauthorized access but may delay legitimate credit requests. Customers are informed about how to initiate this process with the three major credit bureaus: Equifax, Experian, and TransUnion.
For those affected, swift action and vigilance are key in minimizing potential risks associated with the data breach. Federal guidelines and support from Xfinity further aid customers in navigating the aftermath of this incident. With proactive measures and enhanced security strategies, Xfinity aims to restore trust and ensure the safety and privacy of its clientele moving forward.
