Internet Service Titan Discloses Massive Data Breach Exposing 237,703 Customers’ Social Security Numbers
One of the key players in the internet service industry in the United States has revealed that an extensive number of customers have had their social security numbers compromised. The Office of the Maine Attorney General recently released a data breach notice, indicating that Comcast, one of the largest internet service providers, had suffered from a security incident. A staggering total of 237,703 customers’ personal information, including names, addresses, social security numbers, and birthdates, was exposed in this breach.
Comcast promptly notified affected customers through a letter, outlining that the breach occurred at Financial Business and Consumer Solutions (FBCS), a third-party service provider enlisted by Comcast for collections services. The breach was attributed to an unauthorized party that gained access to FBCS’s computer network and certain systems between February 14 and February 26, 2024. As part of a ransomware attack, the perpetrator downloaded data from FBCS systems and encrypted some of their systems. FBCS confirmed the breach publicly in February and estimated that over four million individuals have been affected.
This incident marks the second major data breach impacting Comcast customers in less than a year. In December 2023, Xfinity, which is owned by Comcast, disclosed that personal data of nearly all 35 million customers had been exposed. The compromised information included account usernames, passwords, partial social security numbers, and answers to security questions. Comcast attributed this breach to a vulnerability in Citrix’s software, a cloud computing company.
The recurring nature of these breaches raises concerns about the robustness of Comcast’s security measures and the efficacy of its third-party service providers. As customers grapple with the potential consequences of identity theft and fraud, it is crucial for internet service giants like Comcast to prioritize cybersecurity and diligently safeguard their customers’ sensitive information.