Scammer called me with all my information-data breach?

I’ve been getting phone calls ever since I received my new device. They’re claiming they’re from Xfinity. They have my Email, my address, and know that I got a device almost down to the very week that I ordered it.

Oh, I am aware of the scams, and The first few times they called they claimed that I received the wrong device. Then I told them that I knew I didn’t have the wrong device and I knew it was a scam. Tonight I got a call saying that they were from Xfinity, and started saying the same thing that they Usually do.

I told them I did not receive the wrong device and That I knew that this  was bullsh*t.  The guy tried telling me that it was to register my device this time. I told him Any devices that I would’ve had received in the past would’ve been Registered once I received them.

He then hung up.

My concern is how they know that I got a new device, how they know my information, including my address and my phone number?  

I feel like this is a huge data breach and someone from Xfinity needs to start addressing this as it’s clear that it’s happening to more than enough of their customers. And some of the information they had didn’t come from the shipping box that was sent.  I see some people withhold it was just someone saw the box coming from FedEx or UPS, but if that was the case, why wouldn’t they just take the device at that point? Why would they wait until it gets sent to someone to try to steal it?

This is a very big security concern.