Comcast Xfinity Data Breach Lawsuit

According to a report filed to Maine's attorney general, the breach has impacted 35,879,455 individuals with Xfinity accounts. The Citrix vulnerability, also known as the "Citrix Bleed," has also been linked to hacks targeting the Industrial and Commercial Bank of China's New York arm and a Boeing subsidiary, among others. For more information about who has been affected by the Citrix Bleed or if you believe you are one of the 35 million affected, we may be able to help you. Learn more today by contacting a Morgan & Morgan data breach attorney today.

Citrix Systems, Inc. is a multinational cloud computing and virtualization technology company used by thousands of companies worldwide. Citrix provides its users with servers, applications, and desktop virtualization, networking, software as a service, and cloud computing technologies. While Citrix released its data breach notice on October 10, 2023, to what is now known as the "Citrix Bleed," according to cybersecurity company Mandiant, the zero-day exploitation of this vulnerability began in late August 2023.

As listed in the incident report, on December 6, 2023, Xfinity concluded the following customer information was accessed due to the breach.

• Names
• Contact information
• Dates of birth
• Usernames
• Hashed passwords
• Social security number
• Secret questions and answers

Customers who have specifically had their personal information outside of just their username and password will receive notice, including what specific information was accessed. Until then, all Xfinity customers are asked to monitor their accounts out of precaution.

To help customers protect their accounts, Xfinity is asking that its customers reset their passwords the next time they log in. The company also strongly encourages its customers to enroll in two-factor or multi-factor authentication. Xfinity is also warning customers about the risks of using the same password across multiple accounts, as it may increase their risk factor. "While we advise customers not to re-use passwords across multiple accounts if you do use the same information elsewhere, we recommend that you change the information on those other accounts, as well."

Xfinity is also offering its customers with additional questions access to its IDX, Xfinity's incident response provider managing customer notifications and call center support. Customers can contact IDX at 888-799-2560, toll-free 24 hours a day, seven days a week.

Affected individuals also have the option to monitor their own credit using free online credit reporting tools provided by credit unions like Equifax, Experian, and Transunion, who offer one free credit check a year. For more frequent credit monitoring, Credit Karma allows their users daily access and alerts in case anyone fraudulently uses your details to obtain credit cards or loans, free of cost.

Those who do find fraudulent activity on their accounts can contact the Federal Trade Commission (FTC), your state's Attorney General's office, or law enforcement to report incidents of identity theft, as well as contact any of the previously listed credit reported companies to request a "Security Freeze" on their credit file, at no charge. Under the Fair Credit Reporting Act, victims have the right to be told if information in their credit file has been used against them, the right to know what is in their credit file, the right to ask for their credit score, and the right to dispute incomplete or inaccurate information. 

To learn more information on what steps you can take to protect yourself from identity theft, visit the FTC's websites at www.identitytheft.gov. For more information on the Xfinity / Citrix data breach, affected individuals can contact an attorney.

Victims who file a lawsuit against the company liable for their information being stolen are eligible to recover compensation for emotional distress, damage to their credit, unauthorized charges to their accounts, the cost of credit repair or monitoring, time and expense with the investigation, and more. For an accurate representation of what you may be eligible to recover in a data breach lawsuit, contact a Morgan & Morgan data breach attorney today. 

If you were affected by the Xfinity / Citrix data breach, don't wait to contact an attorney. After your information is compromised due to a data breach, it is essential you know what may be at risk. Speaking with a Morgan & Morgan attorney can help you understand what your legal options are and increase your chances of recovering the compensation you and your loved ones deserve after third-party hackers have stolen your private information. For more information on how a Morgan & Morgan data breach attorney can help, contact us today by completing our free, no-obligation case evaluation form. See why millions trust us.