Breach alert issued after national Comcast, Xfinity customer data compromised

LANSING, Mich. — Comcast and Xfinity customers in Michigan are urged to double check their information after the company experienced a national data breach.

"Maliciously accessed" in October, hackers found a vulnerability in the company's software provided by Citrix and gained access to the following information, according to the attorney general's office:

• Usernames and passwords
• Names and contact information
• The last four digits of their social security numbers
• Birthdates and/or security questions and answers

It is estimated over 35 million Xfinity customers were affected by the breach, officials said.

• More Comcast:Scam targeting Comcast customers makes appearance in Michigan

“I would advise all affected customers to change their passwords immediately, on their Xfinity accounts but also any other accounts for which they use the same or similar login credentials or security questions,” according to Attorney General Dana Nessel. "My department’s website has tips for those who may be affected, and my consumer protection team stands ready to help any Michigan residents who might experience identity theft as a result of this breach.”

Comcast was last known to be notifying customers through the Xfinity website, by email and by alerting the media.

In addition, Xfinity has required customers to change their passwords.

• Cyber crime: With cyber crimes on the rise, experts warn consumers and businesses to protect their data

To protect yourself during a data breach, the attorney general's office recommends the following actions:

• Watch out for phishing emails;
• Strengthen or change your passwords;
• Do not retain unnecessary data or files;
• Use multifactor authentication on devices and accounts; and
• Review your credit report often.
• Take advantage of free weekly credit reports from each of the three main credit reporting agencies: Equifax, Experian, and TransUnion by contacting the Annual Credit Report website.

Xfinity customers with questions about the breach are directed to call 888-799-2560.

Those who wish to file a complaint with the attorney general's office can do so online or by calling 517-335-7599.