Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
Comcast said data belonging to 237,703 subscribers was stolen during a ransomware attack on Financial Business and Consumer Solutions Inc. (FBCS), a third-party debt-collection agency. The incident occurred from February 14 to February 26, 2024, and was publicly reported on October 7, 2024. Available reporting describes a breach of FBCS’s environment—not evidence that Comcast’s own network or Xfinity login systems were hacked.
The short version
Comcast customer records were exposed through a former debt-collection vendor. According to Comcast’s filing as reported by TechCrunch, the affected records included names, addresses, Social Security numbers, dates of birth, Comcast account numbers and Comcast identification numbers.
The reported Comcast-specific population was 237,703 subscribers. That number is separate from the broader FBCS incident, which involved data associated with more than 4 million people across multiple clients.
Free tools Windows power users keep installed
One-click scans. No signup required.
If you received an official breach notice, the most important response is to verify the notice, review your credit reports and consider placing a free credit freeze with Equifax, Experian and TransUnion if your Social Security number was exposed.
#1 Best Overall
- MAXIMIZE YOUR CABLE INTERNET AND WHOLE-HOME WIFI: A cable modem and WiFi router in one device unlocks the full potential of your home internet with faster downloads, smoother WiFi for gaming and video calls, and reliable coverage in every room.
- APPROVED FOR YOUR PROVIDER AND PLAN: Works with Xfinity internet plans up to 800Mbps, Spectrum up to 1Gbps, and Cox up to 1Gbps. Not compatible with Verizon, AT&T, CenturyLink, DirecTV, DISH, or bundled voice plans. ISP activation required after setup.
- MULTI-GIG DOCSIS 3.1 SPEEDS: Get Gigabit+ cable download speeds on today's fastest plans, with headroom for the upgrades ahead. Real-world speeds depend on your plan and ISP network.
- WIFI 6 COVERAGE FOR THE WHOLE HOME: Stay connected in every room with dual-band AX2700 WiFi 6 covering up to 2,000 sq ft and capacity for 25+ connected devices. Real-world coverage depends on home size, layout, and building materials.
- WIRED CONNECTIONS FOR YOUR FASTEST DEVICES: Four Gigabit Ethernet ports keep gaming consoles, desktops, and streaming devices hardwired for the lowest latency and the most stable connection in your home.
What happened at FBCS?
FBCS, a Pennsylvania debt-collection agency previously used by Comcast, experienced unauthorized access to its network between February 14 and February 26, 2024. The attacker downloaded data and encrypted some systems, an event Comcast characterized as a ransomware attack. FBCS discovered the intrusion on February 26 and began investigating.
In March, FBCS initially told Comcast that Comcast customer information was not involved. In July, FBCS informed Comcast that Comcast-related records had in fact been compromised. The sequence helps explain why the incident was disclosed months after the attack.
Secondary reporting said Comcast notified affected people on August 16, 2024. That date should be treated as an attributed report rather than a universally verified notification date; your individual notice is the best source for determining whether your information was included.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Was Comcast hacked?
The available evidence supports a third-party breach, not a confirmed compromise of Comcast’s own network. The affected environment was FBCS’s. Comcast reportedly stopped using FBCS for debt collection in 2020, although the affected records were associated with customers from around 2021.
That distinction matters. The incident does not establish that attackers accessed Comcast’s production network, Xfinity credentials, billing systems or account passwords. It does establish that Comcast-linked customer information was present in a vendor’s systems when those systems were attacked.
A related Truist breach notice made the same kind of distinction for Truist, explaining that the incident affected FBCS rather than Truist’s own systems or network.
Rank #2
- Multi‑Gig speed for today & tomorrow: DOCSIS 3.1 performance supports cable internet plans up to 2 Gbps, delivering ultra‑fast streaming, gaming, and downloads.
- Save on rental fees: Own your modem and avoid monthly equipment charges—check with your cable provider for plan compatibility.
- Compact, modern design: Space‑saving footprint with discrete LED indicators for power, upstream/downstream, and online status.
- Easy setup: Connect cable, power on, and activate with your cable provider. Then connect a Wi‑Fi router to the Ethernet port for home Wi-Fi coverage.
- Modem only: This cable modem requires a separate Wi-Fi router or mesh system for home Wi-Fi network.
What information was exposed?
For Comcast-linked records, the reported categories were:
- Names
- Addresses
- Social Security numbers
- Dates of birth
- Comcast account numbers
- Comcast identification numbers
Not every affected record necessarily contained every listed data element. The available reporting does not establish the exact number of Comcast records containing each category.
The wider FBCS breach involved other clients and broader categories of information. Depending on the individual and client, notices reportedly referenced driver’s-license or state-identification numbers, medical-claims information, provider information, clinical information and health-insurance information. Those categories should not automatically be attributed to every Comcast customer.
How many Comcast customers were affected?
Comcast’s reported figure is 237,703 subscribers. It should not be confused with the overall FBCS incident, which reportedly affected more than 4 million people across several organizations.
Public reporting also connected the FBCS incident with:
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
- CF Medical, doing business as Capio: more than 620,000 individuals reportedly had personal and health information stolen.
- Truist Bank: its notice described potential exposure of names, addresses, account numbers, dates of birth and Social Security numbers in FBCS-held data.
These are separate client populations. They do not increase the Comcast-specific count.
Rank #3
- ⚠️ CABLE INTERNET ONLY - NOT COMPATIBLE WITH: Fiber (Verizon FiOS, AT&T), DSL, Satellite, or Fixed Wireless. ONLY works with cable providers like Xfinity, Spectrum, Cox. Verify your internet type BEFORE purchase.
- 🚫 NO WiFi INCLUDED - ROUTER REQUIRED: This is a modem ONLY. You MUST buy a separate WiFi router to get wireless internet. Without a router, only ONE device can connect via Ethernet cable. This does NOT replace your current WiFi router.
- 🔌 CABLE INTERNET REQUIRED: Works EXCLUSIVELY with cable internet service (DOCSIS) from providers like Xfinity, Spectrum, or Cox. Will NOT work with fiber (Verizon FiOS, AT&T), DSL, satellite, or fixed wireless internet. Contact your ISP to confirm compatibility BEFORE purchasing.
- 🚀 MULTI-GIG PERFORMANCE: Supports internet plans up to 2.5 Gbps with 2.5 Gbps Ethernet port. Designed for plans 1 Gbps and faster from certified providers: Xfinity (up to 2.33 Gbps), Spectrum (1 Gbps), Cox (2 Gbps). Verify your plan speed and provider compatibility.
- 💡 SETUP REQUIREMENTS: You need: (1) Cable internet service, (2) Separate WiFi router with 2.5 Gbps port for full speeds, (3) ISP activation. This modem cannot create WiFi networks or connect multiple devices without additional equipment.
Why did a former vendor still have the data?
Comcast reportedly stopped using FBCS in 2020, yet records tied to customers around 2021 were reportedly present during the 2024 attack. The available reporting does not establish why FBCS retained the records, whether a contract required their deletion or return, or whether Comcast verified that deletion had occurred.
That makes vendor offboarding a central accountability question. When a company ends a relationship with a service provider, effective controls should address:
- What customer data the vendor still holds
- Whether the vendor must return or securely delete it
- How deletion is documented and verified
- How long records may be retained for legal, operational or collection purposes
- Whether former vendors remain subject to security and incident-reporting requirements
The existence of retained data alone does not prove negligence or a legal violation. It does show how third-party retention can create risk long after a commercial relationship appears to have ended.
Timeline of the incident
| Date | What happened |
|---|---|
| February 14–26, 2024 | An unauthorized party accessed FBCS systems, downloaded data and encrypted some systems. |
| February 26, 2024 | FBCS discovered the unauthorized access and began investigating. |
| March 2024 | FBCS initially told Comcast that Comcast customer data was not involved. |
| July 2024 | FBCS informed Comcast that Comcast customer data had been compromised. |
| August 16, 2024 | Secondary reporting said Comcast notified affected customers. |
| September 9, 2024 | Truist issued a related breach notice. |
| October 7, 2024 | TechCrunch reported Comcast’s filing and the 237,703-person figure. |
What affected customers should do
1. Verify the notice
Use contact information from Comcast’s official website or the notice itself, and be cautious with unexpected links. Publicity about a breach can trigger follow-up scams pretending to offer Comcast support, debt-collection help or identity protection.
Do not provide your Social Security number, account password or security codes to an inbound caller claiming to represent Comcast, FBCS or a credit-monitoring company. If you need to contact Comcast, start from its official website or a statement you already trust rather than a link in an unsolicited message.
2. Consider a credit freeze
If your Social Security number was exposed, a credit freeze is generally the strongest preventive step against someone opening new credit accounts in your name. A freeze is free, but you must generally place it separately with each nationwide credit bureau:
Rank #4
- MultiGig speed for today & tomorrow: DOCSIS 3.1 performance supports cable internet plans up to 2.5 Gbps, delivering ultrafast streaming, gaming, and downloads.
- Save on rental fees: Own your modem and avoid monthly equipment charges - check with your cable provider for plan compatibility.
- Compact, modern design: Space saving footprint with simple LED indicators for power, upstream/downstream, and online status.
- Easy setup: Connect cable, power on, and activate with your cable provider. Then join the default Wi-Fi or personalize your own Wi-Fi network name and password.
- Wi-Fi 6 Coverage: Includes dual-band W-Fi 6 (AX3000) delivering up to 3 Gbps wireless performance for your whole home.
A freeze can temporarily add friction when you apply for legitimate credit because you may need to lift it. You can generally lift or remove it when needed.
3. Review your credit reports
Obtain reports through the official AnnualCreditReport.com. Look for unfamiliar accounts, hard inquiries, collection accounts or changes to your personal information.
No suspicious activity today does not prove that the information is safe. Identity data can be used later, so keep monitoring your reports and financial accounts.
4. Consider a fraud alert
A fraud alert asks creditors to take additional steps to verify your identity before extending credit. It is less disruptive than a freeze, but it does not block new credit and should not be treated as equivalent protection.
A fraud alert may suit someone who wants additional verification without managing a freeze, while a freeze is generally more appropriate when a Social Security number may have been exposed.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errors5. Monitor financial and Comcast accounts
Check bank and credit-card statements for unfamiliar activity. Also watch your Comcast or Xfinity account for unexpected changes, although the reported exposed data did not include Comcast passwords and does not establish direct access to Xfinity accounts.
Best Value
- SUPPORTS INTERNET PLANS up to 1 Gbps. Compatible with Cable Internet service plans up to 1 Gbps, ensuring fast and reliable connectivity for all your devices.
- WORKS WITH WIFI ROUTERS or WIFI MESH: Pair with a WiFi Router with this 3.1 DOCSIS Modem to connect all of your WiFi devices to the Internet. This cable internet modem DOES NOT have a built-in WIFI router.
- STOP RENTING & START SAVING - This internet modem replaces your leased docsis 3.1 modem so you can say Good-bye to equipment rental fees and save up to $168/yr. (Savings shown for Comcast Xfinity and can vary.)
- CERTIFIED to work with Comcast Xfinity, Comcast Xfinity Business, Charter Spectrum, Cox Gigablast, CableOne Sparklight, Cogeco Breezeline and Zito Media. Also works with Astound, Grande, RCN and Wave. Check your Internet Service Provider (ISP) website to confirm compatibility.
- NOT COMPATIBLE with AT&T, Verizon, CenturyLink, DISH, DirecTV, Optimum, StarLink and any bundled voice service. Does NOT WORK with DSL, Fiber, Fixed Wireless or Satellite Services.
Change a Comcast password if you reused it elsewhere or have another reason to suspect account compromise. Do not assume that a password change alone addresses the primary risk described in this incident, which is identity fraud involving personal information.
6. Report identity theft
If you find evidence of identity theft, use the FTC’s official resources at IdentityTheft.gov and review the FTC’s identity-theft guidance for recovery steps.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Credit freeze, fraud alert or monitoring?
| Option | What it does | Best fit | Limit |
|---|---|---|---|
| Credit freeze | Restricts access to your credit file for most new-credit applications. | People whose Social Security numbers or identity documents may be exposed. | Must generally be managed at each bureau and can delay legitimate applications. |
| Fraud alert | Asks creditors to take additional identity-verification steps. | People seeking a lighter-touch measure. | Does not prevent every type of identity theft or block new credit. |
| Credit monitoring | Alerts you to some changes or activity in your credit files. | People who want an additional detection tool. | It does not prevent misuse and may not detect every kind of fraud. |
Free credit freezes and official credit reports should come before paying for an identity-monitoring subscription. Any monitoring benefit offered in connection with another FBCS client, including a two-year Experian CSIdentity offer described in the Truist notice, was tied to that 2024 notice and should not be treated as a current Comcast benefit.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →What the breach does—and does not—show
The exposed information is most directly relevant to new-account fraud, social-engineering scams, tax or government-benefit fraud and impersonation by someone posing as a debt collector. Medical identity theft is relevant only if medical information was included in that person’s individual record; the broader FBCS breach does not mean every Comcast victim had health information exposed.
The incident does not, by itself, establish that attackers obtained Comcast login credentials or can directly take over Xfinity accounts. Be alert for account-related scams, but match your response to the evidence in your notice.
What remains unclear
- The exact number of Comcast records containing each individual data element
- Whether any Comcast-related data was publicly posted
- The identity of the attacker or ransomware group
- The precise contractual retention and deletion arrangements between Comcast and FBCS
- Whether current monitoring or reimbursement benefits are available to a particular recipient
Do not rely on old enrollment codes, deadlines or offers from 2024 unless your current official notice confirms that they remain valid.
Bottom line
Comcast customer information was reportedly stolen from FBCS, a former third-party debt collector, in a ransomware attack—not from a confirmed breach of Comcast’s own network. The Comcast-specific group was 237,703 subscribers, and the reported data included Social Security numbers and other identity information. If you were notified, verify the notice, freeze your credit when appropriate, inspect your reports and remain cautious about follow-up impersonation scams.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallCrashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteQuick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
