Notice to Customers of Data Security Incident [Xfinity via Citrix] [pdf]

Fallout from the 10/2023 Citrix incident.

Somehow, I missed this, until I went just now to pay my bill. Since I keep up with the news fairly well, I'm wondering whether others also missed it. AFAIK, this is U.S. centric.

Note the inclusion of information companies use for authentication (e.g. in phone support):

What Information Was Involved? On December 6, 2023, we concluded that the information included usernames and hashed passwords. For some customers, other information was also included, such as names, contact information, last four digits of social security numbers, dates of birth and/or secret questions and answers. However, our data analysis is continuing, and we will provide additional notices as appropriate.