Received "Secondary user security question was changed" email

@XfinityShan​ Thank for getting back.  I wish it was that simple but that selection is not available.

@Petek01  Do you have  two verified contact points set up on the account?(i.e., mobile phone number and personal email).

Most likely - phone/email.  How do I check this?

@XfinityShan​ yesI am. 

I also signed in as the secondary user and the results are the same.

@Petek01 You can check your verified contact methods in the My Account app. Can you scroll to the "Change your secret question" portion here: https://www.xfinity.com/support/articles/changing-or-resetting-your-password  and advise of where in that process that you get stuck? 

Hello @user_619b1d thank you for sharing your concerns with this issue as well. Using that same link, I was able to find the instructions on how to Change Your Secret Question. Please follow these instructions, and let me know if you continue to run into any issues. 

1) Sign in to xfinity.com.

2) Click the Account icon and select Account and Identity from the drop-down menu.

3) Click Xfinity ID and Security under Your Information.

4) Scroll to the Security section and select Security question.

Note: The security question option is only visible when there is an established security question on the account.

5) Select a question, enter the answer and then click Save.

@XfinityShan​ There are no security questions visible on my account.  According to Xfinity Christian, they are only visable if they were established on the account.  According to the CS rep I spoke to on the phone the questions are removed when 2-factor is enabled.  So, how does an alert get generated that a security question was changed when they are no longer visable to the account?  Sounds like someone has access to some 'behind the scene' info.  I don't think we're being given the whole story here.  Is there a security concern here from a user standpoint?  Did my account get compromised?  Was my account accessed and modified by a 3rd party?  

@XfinityChristian​ As I described in my original post, I have two-factor authentication enabled on my accounts. How did the email get triggered that a "Secondary user security question was changed" if there is no security question because two-factor authentication is enabled?

@user_619b1d From what I understand, you can have both 2FA and a Security Question set up on an account at the same time. 

@user_619b1d My thoughts exactly!  It's as if somebody is using a backdoor to see data that exists but is not displayed to the user.  The email I recieved says "Your security is top priority at Xfinity!".   But an apparent modification to a user account that was not initiated by the account holder which triggers a security alert is not a top priority.  One report of this happening may be explained away, but 2 people reporting the same behavior is the start of a pattern.