Just how many had their xfinity e-mail hacked yesterday?

@Lord_Basil​ I dunno man.  I'd say the account is burned.  Stop using your email account.  I don't know what the answer is.  Paper billing for when visa/mastercard tires of this and randomly cancels your card?  I gotta create a dump account to pay my cable bill from now on?

This is another point. Is this happening only to "manager" accounts? So far, none of the "member" accounts have been hijacked.

Given the complete lack of engagement from XFINITY on this thread and others, I thought it might be the right thing to appeal to the XFINITY VP of customer success’ office.   My rationale was (as someone who has led security breach responses for a large org several times) to ensure they had visibility into this discussion and to appeal for transparency needed for customers to protect themselves. 

Within a couple of days I got a series of responses that missed the point and replied with a level of condescension I was surprised with. To paraphrase - thanks for being a customer since 1998, thank your for feedback, can I interest you in our exciting rewards program. I thought I’d even be offered an extended car warranty. 

They also let me know that since I’d responded to them a couple of times they would no longer respond back to me. 

this was a truly pathetic response for an incident that’s clearly impacted a lot of people and which was “still under investigation”. 

Any expectation that the email service or the supporting organization can be trusted to work in their customers’ best service is questionable at best.  Best advise is to migrate to a more trustworthy service provider for your email if you’re stuck with them for internet access.  

Good luck everyone. 

Not sure if the thread is locked, lets see.

What happened Xfinity Security, you said the "Pending Verification" yopmail personal verification Email addresses would be purged from accounts in 72 hours! Since it is still there, should I verify my new yopmail account? LOL

I let it sit there to see how long Xfinity Security team would break its promise to clean it up or fix the system.  At least they fixed the ability to change the bogus verification Email address and no longer return a modal error I mentioned, clearly a coding bug previously. Have you fixed the API or other bypass methods? Were you transparent with your customers about what occurred?

Changing the bogus pending verification Email address to a valid one and then verifying it as a good Email address, I found removes any previous secondary verified validation Email address already on file, LOL. At least I was able to go back and change it again.  You still haven't fixed the ability to assign my cell phone number to multiple Email addresses I own to enable TFA "Mobile Number is already linked to an active account". How many cell phone numbers do you think I own? 

@Lenox274​ 

If you want to resolve this yourself you can.

That yop email has no password (that is how they are designed). You can log into to https://yopmail.com/ and log in as that email. The verification email should still be there. If not you can resend it. Just accept the email to make yop the secondary, then immediately go back to comcast and change it to you preferred secondary email of choice. 

I believe that is what I did last month and it worked for me. Comcast also told me it would resolve on its own, but I dont think that is true.

Good Luck

Hello @Lenox274. Thank you for posting. In order to get this account deleted, please contact our Customer Security Assurance Team at 1-888-565-4329 between the hours of 8:00am - 12:00am EST, 7 days a week. They are the only team that can assist us with this matter. 

@XfinityChe​ so I have asked your company twice calling in and wasting my time to get this fixed.  Will it get fixed on the 3rd try?

================================================================================

UPDATE- I just checked, and the faked YOPMAIL account was removed... maybe someone saw my posts and decided to fix my account.

"Thank You?" Not sure if that is really an earned thanks for finally doing what should have been done months and weeks ago.

@Lkpolo​ seriously, why should Xfinity be immune from shade?  They’ve handled the public side of their incident response in an appalling way.   The post from @xfinityche above, for which I’m grateful as the first post from Xfinity in this thread, is completely insufficient.     Of course it’s up to each one of us to keep our accounts safe, thats a given.   I’d ask you - besides the regular updates, malware/virus protections, phishing awareness and strong passwords — what would you suggest.   Given my unsatisfactory interaction with customer success a couple of weeks ago,  “the incident is still being investigated”.  So without any information available from Xfinity about root cause or guidance to the customer community, i dont know what we could have done to prevent this.   This has happened multiple time to many of us with our xfinity email, which is why i believe the service nor the company is trustworthy in its transparency or customer advocacy.   Agreed that we have to do what we need to at our own expense.  To me, that means abandoning the service.

My experience was different. Once I reached Customer Security my email account was watched for several days to see where bad actors were located when logging into my account. After that, I took the steps to change EVERY password of EVERY account I used online. I contacted all financial advisors and CC companies to let them know of the hack and I was told what to do and what they do to keep my accounts safe. It was at that point I found the identity theft protection and at my own expense had it added to my homeowners insurance. It has so far worked. I immediately get notified when a credit card is opened in my name as well as other hacks that can occur. I also get a summary each month and I have people I can call other than Xfinity that support my efforts to keep all of my online activity safe.