Comcast’s Xfinity reveals data breach potentially affecting nearly 36 million people

(CNN)– Comcast says the personal information of nearly 36 million of its Xfinity customers may have been accesses by hackers.

Xfinity provides broadband internet, wireless service and pay TV.

Comcast said the breach which happened in October was the result of a vulnerability in the third-party cloud-computing software made by Citrix.

The software lets workers remotely access corporate networks.

The compromised Xfinity data includes usernames, scrambled passwords, birth dates, contact information, the last four digits of social security numbers along with secret questions and answers.

Comcast says the affected software has now been patched and the cable giant is not aware of any leaks of customer data or of any attacks on customers.

Also, the company says it’s requiring customers to reset their passwords.

And recommends they enable multi-factor authentication.

Meanwhile, Citrix has said it is encoring customers to apply its software patches ASAP.