=EF=BB=BF =09

= = = = = = =

= = = = = = =
=
=
Xfinity Data Security I= ncident
=

=
Notice of Data Security= Incident
=
We are notifying you of a recen= t data security incident involving your personal information. This notice ex= plains the incident, steps Xfinity has taken to address it, and guidance on w= hat you can do to protect your personal information.
=
=
=

= = = = = = =

= = = = = = =
=
=
What Happened? On October 10, 2023, one of Xfin= ity=E2=80=99s software providers, Citrix, announced a vulnerability in one o= f its products used by Xfinity and thousands of other companies worldwide. A= t the time Citrix made this announcement, it released a patch to fix the vul= nerability. Citrix issued additional mitigation guidance on October 23,= 2023. We promptly patched and mitigated our systems.
=
However, we subsequently discovered that prior to mitigation, b= etween October 16 and October 19, 2023, there was unauthorized access to som= e of our internal systems that we concluded was a result of this vulnerabili= ty. We notified federal law enforcement and conducted an investigation into t= he nature and scope of the incident. On November 16, 2023, it was deter= mined that information was likely acquired.
=
=
=

= = = = = = =

= = = = = = =
=
=
What Information Was In= volved? On December 6, 2023, we concluded that the information= included usernames and hashed passwords; for some customers, other informat= ion was also included, such as names, contact information, last four digits o= f social security numbers, dates of birth and/or secret questions and answer= s. However, our data analysis is continuing, and we will provide additional n= otices as appropriate.
=
=
=

= = = = = = =

= = = = = = =
=
=
What We Are Doing. To protect your account, we have proactively asked you to reset your pa= ssword. The next time you login to your Xfinity account, you will be prompte= d to change your password, if you haven=E2=80=99t been asked to do so alread= y.
=
=
=

= = = = = = =

= = = = = = =
=
=
What You Can Do. We strongly encourage you to enroll in two-factor or multi= -factor authentication. While we advise customers not to re-use password= s across multiple accounts, if you do use the same information elsewhere, we= recommend that you change the information on those other accounts, as well.= You can review the =E2=80=9CAdditional Information=E2=80=9D section below f= or information on how you can further protect your personal information.
= =
=
=

= = = = = = =

= = = = = = =
=
=
More Information. If you have additional questions, please contact IDX, Xfinity=E2=80=99s i= ncident response provider managing customer notifications and call center su= pport, at 888-799-2560 toll-free, 24 hours a day, 7 days a week. More inform= ation is available on the Xfinity website at www.xfinity.com/dataincident.
=
We know that you trust Xfinity to protect your information, and= we can=E2=80=99t emphasize enough how seriously we are taking this matter. W= e remain committed to continue investing in technology, protocols and expert= s dedicated to helping to protect your data and keeping you, our customer, s= afe.
=
=
=

= = = = = = =

= = = = = = =
=
=
Sincerely,
=
Xfinity
=
=
=

= = = = = = =

= = = = = = =
=
=
Additio= nal Information
=
=
=

= = = = = = =

= = = = = = =
=
=
In general, you should remain v= igilant for incidents of fraud and identity theft by reviewing account state= ments and monitoring your credit reports. You are entitled to a free copy of= your credit report annually. To obtain your credit report, visit www.annualcreditreport.com, call tol= l-free 1-877-322-8228, or mail an Annual Credit Report Request Form (availab= le at www.annualcreditreport.c= om) to: Annual Credit Report Request Service, P.O. Box 105281, Atlanta, G= A, 30348-5281. You can also purchase a copy of your credit report or contact= the three major credit reporting bureaus at:
=
=
=

= = = = = = =

= = = = = = =
=
= = = = = = = = =
Equifax
= PO Box 7402= 41
= Atlanta, GA= 30374
= www.equifax.com
= 888-378-432= 9 Experian
= PO Box 2002=
= Allen, TX 7= 5013
= www.experian.com
= 888-397-374= 2 TransUnion
= PO Box 1000=
= Chester, PA= 19016
= www.transunion.com
= 800-888-421= 3
=
=
=

= = = = = = =

= = = = = = =
=
=
You should report any actual or= suspected identity theft to the Federal Trade Commission and law enforcemen= t. You can obtain information from the Federal Trade Commission and the thre= e major credit bureaus about additional steps you can take to protect yourse= lf against identity theft and fraud, as well as information on placing secur= ity freezes and fraud alerts on your credit report. You can contact the Fede= ral Trade Commission at: 600 Pennsylvania Avenue NW, Washington, DC 20580; <= a href=3D"https://www.identitytheft.gov/" style=3D"color:rgb(0,0,255);text-d= ecoration:underline;" target=3D"_blank">www.identitytheft.gov; and 1-877= -ID-THEFT (1-877-438-4338). This notice was not delayed as a result of a law= enforcement investigation.
=
You may place a security freeze on your credit reports, free of= charge. A security freeze prohibits a credit reporting agency from releasin= g any information from a consumer=E2=80=99s credit report without written au= thorization. However, please be aware that placing a security freeze on your= credit report may delay, interfere with, or prevent the timely approval of a= ny requests you make for new loans, credit mortgages, employment, housing, o= r other services. You will need to place a security freeze separately with e= ach of the three major credit bureaus if you wish to place a freeze on all o= f your credit files. In order to request a security freeze, you will need to= supply your full name, address, date of birth, Social Security number, curr= ent address, all addresses for up to five previous years, email address, a c= opy of your state identification card or driver=E2=80=99s license, and a cop= y of a utility bill, bank or insurance statement, or other statement proving= residence. To find out more on how to place a security freeze, contact the c= redit reporting agencies:
=
=
=

= = = = = = =

= = = = = = =
=
= = = = = = = =
Equifax
= P.O. Box 10= 5788
= Atlanta, GA= 30348
= 888-298-004= 5
= equi= fax.com/personal/credit-report-services/credit-freeze/ Experian
= P.O. Box 95= 54
= Allen, TX 7= 5013
= 888-397-374= 2
= experian.com/freeze/center.html= TransUnion
= P.O. Box 16= 0
= Woodlyn, PA= 19094
= 800-916-880= 0
= transunion.com/credit-freeze =
=
=
=

= = = = = = =

= = = = = = =
=
=
At no charge, you can also have the three major credit bureaus p= lace a fraud alert on your file that alerts creditors to take additional ste= ps to verify your identity prior to granting credit in your name. Note, howe= ver, that because it tells creditors to follow certain procedures to protect= you, it may also delay your ability to obtain credit while the agency verif= ies your identity. As soon as one credit bureau confirms your fraud alert, t= he others are notified to place fraud alerts on your file. Should you wish t= o place a fraud alert, or should you have any questions regarding your credi= t report, please contact the credit reporting agencies:
=
=
=

= = = = = = =

= = = = = = =
=
= = = = = = = =
Equifax
= P.O. Box 10= 5069
= Atlanta, GA= 30348
= 888-836-635= 1
= equifax.com/personal/credit-report-services/credit-fraud-alerts/ Experian
= P.O. Box 95= 54
= Allen, TX 7= 5013
= 888-397-374= 2
= experian.com/fraud/center.html TransUnion
= P.O. Box 20= 00
= Chester, PA= 19106
= 800-916-880= 0
= transunion.com/fraud-alerts =
=
=
=

= = = = = = =

= = = = = = =
=
=
For New York residents, the New York Office of the Atto= rney General can be contacted at The Capitol, Albany, NY, 12224, ag.ny.gov, or 1-800-771-7755.
=
For North Carolina residents, the North Carolina Attor= ney General can be contacted at 9001 Mail Service Center, Raleigh, NC 27699,= ncdoj.gov, or 919-716-6000.
=
=
=