A class action lawsuit has been filed against Comcast Cable and Citrix Systems alleging the companies failed to protect customers' personal information.
Curtis Brown filed the complaint in federal court against Comcast Cable Communications LLC and Citrix Systems Inc. on behalf of himself and all others similarly affected.
Because of a critical vulnerability in Citrix software known as "CitrixBleed," the complaint claims hackers were able to compromise the personally identifiable information (PII) of nearly 36 million customers. This information includes names, contact details, partial Social Security numbers, dates of birth, and secret questions and answers for password resets, according to the complaint.
Despite being informed about the issues on October 10, 2023, Comcast allegedly waited six to nine days before addressing it, according to the complaint, but by then it was too late, resulting in a significant data breach.
Comcast and Citrix are accused of failing to invest adequate time or resources into protecting their customers' PII. The lawsuit also criticizes Comcast's response to the incident. According to the Notice of Data Security Incident filed by Comcast with the Maine Attorney General, it wasn't until November 16 that it was determined PII had been compromised. Furthermore, no form of identity theft or credit monitoring services were offered to victims.