Major internet service provider Xfinity has reported a significant data breach. Unauthorized access to customer data has been confirmed, but the scope of the breach is still unclear.
On Monday, Xfinity announced a “data security incident” that took place between Oct. 16 and October 19, 2023, as per a report by The Verge. Unauthorized access to the company’s systems resulted in the theft of customer data, including usernames, passwords, and contact information.
The breach was linked to a security vulnerability in the company’s software, which was brought to light by cloud computing firm Citrix. Xfinity confirmed the software flaw, which Citrix had flagged on Oct. 10. Despite patching the vulnerability, Xfinity noticed unusual activity on its internal systems that was tied to this flaw.
The breach led ...