SSN and DOB Requested in by Customer Service Representative

I have been trying to upgrade an older device on an existing plan.

I started by going into a store to see if the trade and data transfer could be done in person. They indicated that the account was not coming up, and to try online.

From the Xfinity site, I went to the shop devices page but continually was given an error and was unable to see any devices.

When chatting with a CSR about these issues, they were willing to help but quickly asked for last 4 of CC# and provided a secure link on the comcast.com domain for entry of SSN and DOB information.

I have looked through a number of other forum posts, and there seems to be no real confirmation by Comcast and XFINITY whether these are legitimate requests, or why these are taking place.

Are CSRs from Comcast/Xfinity involved in fraudulent data collection and phishing?

This seems to be rampant and I think it is unacceptable how unclear the response is from your support staff.