Comcast Data Breach: Over 237,000 customers affected by ransomware attack

Comcast, a major US telecom company, has confirmed a data breach that occurred in February 2024. The breach involved sensitive information of some of its customers. This was revealed through a recent court filing in Maine.

The breach resulted from a ransomware attack on Financial Business and Consumer Solutions (FBCS), a debt collection agency previously used by Comcast. Hackers accessed FBCS's computer network between February 14 and February 26, 2024, downloading sensitive data and encrypting some systems.

Over 237,000 Comcast customers were affected, with compromised data including names, addresses, Social Security numbers, dates of birth, Comcast account numbers, and internal ID numbers used by FBCS. Although Comcast stopped using FBCS for debt collection in 2020, the breach affects customers who were subscribers around 2021.

Initially, FBCS reported no customer data was compromised. However, in July 2024, they disclosed the breach to Comcast, causing a delay in notifying affected individuals.

Comcast is now informing impacted customers and advising them on protective measures against identity theft. The company is offering a minimum of 12 months of complimentary identity theft protection services through CyEx Identity Defense Complete, which provides credit monitoring services. Customers are also advised to stay vigilant against fraud and check their account statements.