“Comcast recently reported having roughly 32 million customers, which suggests that the data breach could affect all Xfinity customers and possibly employees as well.”
Xfinity told the Maine Attorney General 35,879,455 people were hit. Its own press release left the number out. Citrix shipped the CitrixBleed patch on October 10, and attackers were inside Xfinity from October 16 to 19, a week later. Comcast calls that patching “promptly.” The stolen secret questions and answers don’t change when you reset a password.