Thanks, I have Xfinity but didn't get an email.

I imagine that is a fairly common reaction among people, given the plethora of stories about data breaches, online fraud, etc. etc. Probably especially so among we Boomers, who came of age and lived as young adults in a totally different reality.

I sometimes think my brother has it right. He lives alone in far Northern Minnesota. No computer. No cell phone. His phone is a land line still in Dad's name (Dad died in 2004). No credit cards. His only two concessions to modernity (semi-modernity) are a checking account and satellite TV.

As he is fond of saying "just because you're paranoid does NOT mean that they're not out to get you".

For anyone with the password manager LastPass, they have been breached several times. Find another password manager. So far 1Password has never been breached.

Like many others I saw this on the news and changed password long before being notified by Xfinity. What I found funny (not) was their advise to purchase the likes of Experion etc. First time I have been part of a compromise where the company didn’t offer free monitoring for 12 months. Their mistake, they should cover. Heck, they will bake the cost into their next renewal anyway.

On this data breach they got everything about you including your SS number. Comcast should be held liable for any costs incurred by people who have damages from identity theft!!!

Terrible. So not only paying a premium for their services but they are raising their prices even with a deal due to higher fees from their content providers but now have to worry about a data breach.

Glad I switched to Quantum Fiber a while back.

Good News! As more services move to passkeys the breaches will have less impact, because the credentials are stored on your device not the server.

Unfortunately services like xfinity will probably be slow to adopt it. https://youtu.be/j1zUY7lOKq8

In the meantime a secure password manager like Bitwarden.com can ease your password frustrations.

The letter said the last four of the SS number. Do you have any information that it was more than that?

My name, number, last four of SSN, and DoB are stored on many places, possibly including the open internet. I don't like seeing them all in one place and I don't like that systems that have them are breached but I don't get terribly excited about that either.

With the information that was taken they *might* be able to get into my Xfinity account. If I reused a password on another site then they *might* be able to get into that site if they tried. And, if I used a particularly weak password then they *might* be able to determine what it was. The things that they *might* be able to do are still a long way from actually stealing anything from me.

I've had checking accounts opened in my name even without data breaches. It will be very difficult for anyone to prove that a case of identity theft is attributable to this particular data breach. A credit freeze is a wise choice even without a breach. A monitoring service or getting the six free credit reports (two for each of the three credit bureaus) is good for peace of mind.

They add up any cost they can think of plus a few just in case and add it to their yearly renewal. We get to pay for their incompetence

Even Equifax can't keep your data safe.
"40 percent of the population of the United States — whose names, addresses, dates of birth, Social Security numbers, and drivers’ licenses numbers were exposed."
Equifax data breach FAQ: What happened, who was affected, what was the impact? | CSO Online
Equifax Data Breach Settlement | Federal Trade Commission

...

...

The only affiliation we have with Xfinity is that when we changed cable providers, we were able to keep the email addresses that we have had for many years. (they end in @comcast.net) I was able to change the password to the primary account but haven't been able to change the password on the two secondary accounts, so we are locked out. Any suggestions?

Agree!!

Yes. Bite the bullet and establish a new e-mail address(es), independent of your current or previous ISP, that you can keep for the rest of your life. I know it can be painful but you should just do it. There are plenty of no cost options (gmail, yahoo, etc) as well as creating (and paying for) your own domain so your e-mail will look something like "firstname@lastname.com".