590K Comcast User Passwords Stolen, Company Blames Customers

Telecom giant Comcast was hacked but it refuses to take the blame. The company is being forced to reset passwords for about 200,000 customers after revelations that account information was leaked and put up for sale on the black market.

Over the weekend, the Dark Web marketplace offered up a list of 590,000 Comcast e-mail addresses and passwords. Also known as the Deep Web, the Dark Web is a slew of sites that run on darknets that require specific software or special access to reach. Hackers often use the Dark Web to sell information obtained illegally.

The seller ponied up a list of over 100 accounts as proof it had the Comcast customer goods. The sale price was $300 for 100,000 accounts. The real bargain was $1,000 for all 590,000 accounts. According to news reports, only about 200,000 of the accounts were actually active.

Comcast Denies Responsibility

In published statements, Comcast insisted its databases and apps were not hacked. The company, instead, pointed its finger back at its customers, claiming they may have compromised themselves by visiting sites hosting malware or were otherwise tricked into revealing their passwords.

EUWeEUre taking this seriously and weEUre working to get this fixed for those customers who may have been impacted,EU a Comcast spokesperson said in a statement. EUBut the vast majority of information out there was invalid.EU

However, Comcast said because it was not hacked, it will not offer free credit monitoring to individuals affected in the incident, according to reports.

The Social Economy

We caught up with Tim Erlin, director of IT security and risk strategy at advanced threat detection firm Tripwire, to get his thoughts on the event. Unfortunately for Comcast, proving a negative is always a tough position, he told us.

EUComcast may not have any indication or evidence that these account details came from a compromise, but...

Comments are closed.