October 4, 2024 at 04:18PM
Comcast revealed 237,703 customers’ data was stolen in a cyberattack on a debt collector they used, contradicting previous information. The compromised agency had earlier stated no Comcast data was affected, but later admitted the breach. The affected data included personal details, implying a ransomware attack, and the collector’s financial issues left Comcast to handle support services.
From the meeting notes, the key takeaways are:
1. Comcast confirmed that data from 237,703 of its customers was stolen in a cyberattack on a debt collector, FBCS, contrary to previous assurances.
2. FBCS was compromised in February, and after an initial assurance that no Comcast customer information was affected, it was later discovered that names, addresses, Social Security numbers, dates of birth, and Comcast account numbers were among the data stolen. This affected customers from “around 2021.”
3. Comcast’s systems, including those of its broadband unit Xfinity, were not breached in this incident.
4. FBCS revealed that an unauthorized party gained access to its computer network from February 14 to February 26, 2024, and downloaded data as part of a ransomware attack.
5. Comcast had to take the initiative to inform affected customers and provide support services as FBCS’s financial situation prevented it from offering usual identity and credit monitoring protection.
6. Another debt collection agency, CF Medical (trade name for Capio), also filed a breach notification to Comcast, stating that 626,396 of its customers were affected.
These are the key points that can be derived from the meeting notes regarding the cyberattack and data breach involving Comcast, FBCS, and CF Medical.