Signage for Xfinity, the cable division of Comcast, is displayed in Philadelphia, July 15, 2015. Hackers accessed Xfinity customers’ personal information by exploiting a vulnerability in software used by the company, the Comcast-owned telecommunications business announced this week. In a Monday, Dec. 18, 2023, notice to customers, Xfinity said there was unauthorized access to internal systems as a result of this vulnerability — which was previously announced by software provider Citrix — between Oct. 16 and 19. (AP Photo/Matt Rourke, File)
Hackers accessed Xfinity customers' personal information by exploiting a vulnerability in software used by the company, the Comcast-owned telecommunications business announced this week.
In a Monday notice to customers, Xfinity said there was unauthorized access to internal systems as a result of this vulnerability — which was previously announced by software provider Citrix — between Oct. 16 and 19.
Xfinity discovered the “suspicious activity” on Oct. 25, and in the following months determined that information was “likely acquired.” On Dec. 6, the company concluded that information included usernames and hashed passwords — and, for some customers, the last four digits of Social Security numbers, account security questions, birthdates and contact information.
Analysis of the breach is still continuing but to date, Xfinity is “not aware of any customer data being leaked anywhere, nor of any attacks on our customers,” the company said in a statement sent to The Associated Press Tuesday.
Xfinity is also requiring customers to reset their passwords, while strongly recommending two-factor or multifactor authentication.
A filing with Maine's office of the attorney general disclosed that nearly 35.9 million people were affected by this breach. The company declined to confirm a specific number Tuesday, but noted the filing's figure represents user IDs.
Philadelphia-based Comcast has more than 32 million broadband customers, according a recent earnings release.
In addition to Xfinity, Citrix provides software to thousands of companies around the world. The previously-announced vulnerability, dubbed “Citrix Bleed,” has also been linked to hacks targeting the Industrial and Commercial Bank of China's New York arm and a Boeing subsidiary, among others.
Under new rules that went into effect Monday, the Securities Exchange Commission now requires public companies to disclose all cybersecurity breaches that could affect their bottom lines — within four days of determining a breach is material. As of Tuesday, there were no SEC filings from Comcast about the recent data breach and the company did not immediately address it.
An independent watchdog within the IRS reports that while taxpayer services have vastly improved, the agency is still too slow to resolve identity theft cases. And National Taxpayer Advocate Erin Collins says those delays are “unconscionable.” Erin M. Collins said in the report released Wednesday that overall the 2024 filing season went smoothly, though IRS delays in resolving identity theft victim assistance cases are worsening. It took nearly 19 months to resolve self-reported identity theft cases as of January, and Wednesday's report states that now it takes 22 months to resolve these cases.
Amazon.com Inc. surpassed $2 trillion in market value for the first time in afternoon trading on Wednesday. The push higher for Amazon’s stock market valuation comes a little more than a week after Nvidia hit $3 trillion and briefly became the most valuable company on Wall Street. Nvidia’s chips are used to power many AI application and its valuation has soared as a result. Amazon has also been making big investments in AI as global interest has grown in the technology. Most of the company’s focus has been on business-focused products.
Climate change doesn’t just mean more extreme weather – it also leads to billions of dollars in lost productivity, tourism, and stresses infrastructure.
It’s an annual tradition: the Fed’s banking ‘stress test.’ A year after the regional banking crisis, there are good reasons to make sure they’re prepped.
Summer is upon us, which means weddings, trips overseas, and trips to see Taylor Swift. Avoid a “Cruel Summer” with these budget-friendly tips and tricks.
While Nvidia's meteoric rise led it to briefly dethrone Microsoft as the world's biggest public company, there's a lot more going on in this market than A.I.
