Comcast (Xfinity) data breach
Was I affected?
Comcast (Xfinity) confirmed a breach affecting about 237,703 people, exposing names, addresses, dates of birth and Social Security numbers. You may be affected if you had a Comcast/Xfinity account that was referred to collections before 2021 and received a Comcast letter in late 2024.
| Announced | Oct 4, 2024 |
|---|---|
| When it happened | February 14-26, 2024 |
| People affected | 237,703 |
| Data exposed | Names, Addresses, Dates of birth, Social Security numbers and Other details |
| Through a vendor | Financial Business and Consumer Solutions (FBCS) |
| Status | Confirmed by the company or a regulator filing |
What happened
Comcast notified about 238,000 current and former customers that their data was stolen in a February 2024 ransomware attack on FBCS, a debt collector Comcast used until 2020. The files held names, addresses, birth dates, Social Security numbers and Comcast account numbers from around 2021. FBCS initially told Comcast its data wasn't involved and corrected that in July 2024.
What should I do?
- Freeze your credit for free at Equifax, Experian and TransUnion so no one can open new accounts in your name.
- Request an IRS Identity Protection PIN so nobody can file a tax return with your Social Security number.
- Sign up for the free credit or identity monitoring offered in the notice letter before its enrollment deadline.
- Treat emails, texts and calls that mention Comcast, Xfinity or past-due bills as suspect; don't click links or share codes, and contact the company through its official app or website.
Check the other services you use →
Sources
- 238,000 Comcast customers hit by FBCS ransomware attack · SecurityWeek (news)
- FBCS data breach impacted 238,000 Comcast customers · Security Affairs (news)