On December 19th, 2023, Comcast announced a significant data security incident. This incident, which occurred between October 16th and 19th of this year, exposed Xfinity usernames and hashed passwords, names, contact information, partial social security numbers, dates of birth, and secret questions and answers.
The full announcement from Comcast can be found here.
Due to the magnitude of this compromise, we recommend you take the following action if you use an Xfinity service:
We recommended the following actions:
- Change your Comcast Password – https://www.xfinity.com/support/articles/changing-or-resetting-your-password
- Enable Multi-Factor Authentication on your Comcast Account – https://www.xfinity.com/support/articles/two-step-verification-xfinity-app-setup
- Update your Comcast Secret Question – https://www.xfinity.com/support/articles/change-your-security-question-and-answer
- Change any non-Comcast account passwords that use the same password as Comcast – We recommend always using different passwords for every account. We have made this guide to help make strong passwords – https://fixedfeeit.com/blog/how-to-create-secure-passwords
- Monitor your credit regularly – The federal government gives you the option to get free weekly credit reports through their website – https://www.annualcreditreport.com/index.action