Free tools Windows power users keep installed
One-click scans. No signup required.
The October 2023 Xfinity data breach affected 35,879,455 people, according to a Maine Attorney General breach filing—about 36 million. Xfinity said usernames and hashed passwords were involved; some customers also had additional personal details exposed. The count does not mean that every affected person’s Social Security number or other additional information was involved.
What happened in the Xfinity data breach?
Xfinity said unauthorized access to some of its internal systems occurred from October 16 through October 19, 2023, and that it concluded the incident resulted from a Citrix vulnerability. The company said the vulnerability was announced and patched on October 10. Xfinity later determined that information was likely acquired on November 16, and on December 6 concluded that customer data was involved. These are Xfinity’s statements about its investigation, not independent forensic findings. Xfinity’s incident notice
How many people were affected?
The Maine Attorney General filing for Comcast Cable Communications LLC reports 35,879,455 people affected, including 50,782 Maine residents. That filing lists December 6, 2023, as the discovery date and December 18, 2023, as the consumer notification date. Maine Attorney General breach filings
What information was exposed?
Information Xfinity said was involved
In its December 6, 2023 conclusion, Xfinity listed usernames and hashed passwords. A hashed password is a transformed representation rather than the plain-text password, but its presence still makes resetting the password and avoiding reuse prudent.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minute#1 Best Overall
Additional information affecting some customers
Xfinity said that for some customers, the information involved also included one or more of the following: names, contact information, the last four digits of Social Security numbers, dates of birth, and secret questions and answers. The company did not say these additional details applied to everyone included in the affected-person count. Its notice said analysis was continuing and that further notices could follow.
Did the Xfinity data breach affect me?
The available sources do not establish a public account checker that can confirm whether a particular person was affected. If you received an Xfinity notice, follow its instructions. Even without a notice, customers can take the account-protection steps below; do not assume that the full list of additional details was exposed for every customer.
What should Xfinity customers do?
Secure your Xfinity login
- Use the password-reset prompt in your Xfinity account and choose a unique password you do not use elsewhere.
- Enable two-factor or multifactor authentication if available. Xfinity strongly encouraged customers to use it.
- Change the password on any other account where you reused the Xfinity password.
- Be alert for phishing. Xfinity said it would not contact customers by phone, email, or text to ask them to update passwords; treat direct requests to do so as potentially fraudulent.
Check financial and credit information
- Review financial account statements and credit reports for unfamiliar activity.
- Consider a credit freeze or fraud alert if you want additional protection. Xfinity’s notice says a freeze is free and must be placed separately with each major credit bureau. A freeze can delay applications for credit, housing, employment, or other services.
What is the status of the Xfinity data-breach settlement?
The court-authorized Hasson v. Comcast settlement website reports that the court approved the settlement on August 20, 2026. It lists a $117.5 million settlement fund and a claims deadline of September 14, 2026. That deadline has passed; the site is the appropriate place to check for any settlement updates.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
