// UNCLASSIFIED // CLEARED FOR PUBLIC RELEASE //
FILE BRC-newsDTG 0600Z
ColdRecon / Breach Radar / Comcast (Xfinity)
Breach Record

Comcast (Xfinity)

DISCLOSED 2023-12-19 · UNPATCHED CVE

Comcast's Xfinity experienced a data breach after attackers exploited the CitrixBleed vulnerability. Customer data was accessed, though the full extent of records exposed remains unspecified. The breach highlights risks from unpatched CVEs in widely used enterprise software.

The record

What we know

Disclosed
2023-12-19
Attack vector
Unpatched Cve
Sector
telecommunications
Country
US
Domain
xfinity.com
Data classes exposed
customer data
Sources

Cited reporting

↗ vulnera.com (2023-12-19)
Similar vector · recent

Other unpatched cve breaches on file

Trump Mobile · 2026-05-29 LexisNexis Legal & Professional · 2026-03-18 multiple organizations (Michelin, Mazda, Canon, Logitech, Harvard University, etc.) · 2025-11-28 Cox Enterprises · 2025-11-28 Oracle · 2025-11-21 Entrust · 2025-11-14 The Washington Post · 2025-11-13 managed service provider · 2025-05-28

This page is the permanent ColdRecon entry for the Comcast (Xfinity) disclosure. It updates if new public reporting emerges. All tracked breaches →

Comcast (Xfinity) just lived through this. Your next prospect doesn't have to.

ColdRecon turns every disclosed breach into a daily intelligence brief from the seller's seat — normalized to the factors that move a deal, written in the Handler's voice. Request clearance and the first lands tomorrow at 0600.

Request Clearance →