Sponsored Links

Comcast resets customer passwords after account info hits Dark Web

Comcast resets customer passwords after account info hits Dark Web
Roberto Baldwin
Roberto Baldwin|@strngwys|November 9, 2015 2:29 PM

If you received a correspondence from Comcast that your password was being reset, there's a good chance your customer information was for sale on a Dark Web marketplace. A list of 590,000 accounts were made available to anyone willing to pony up some cash for email and password information. The price for 100,000 accounts was $300 while the entire list would set someone back about $1,000. The rub is that only 200,000 of the accounts were actually active. Those have already been reset by Comcast. While the information is no longer valid, this is a good reminder that you should not use the same password on multiple accounts. If a customer used the same password for their Comcast account that they use for their email account, it's extremely simple for someone to take over any services associated with that email via a password reset.

The data dump was noticed by Twitter user, @flanvel over the weekend. How the data was collected is still unknown. It could the result of a large scale phishing attack or information from earlier breaches. According to CSO, the sellers only had one sale.

Turn on browser notifications to receive breaking news alerts from Engadget
You can disable notifications at any time in your settings menu.
Not now

[Image credit: Getty/AFP]

All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission. All prices are correct at the time of publishing.
Comcast resets customer passwords after account info hits Dark Web