Comcast/Target Scam and Lack of Security on my Account

The Comcast/ Target Scam is still alive and well.  They called me and they had all of my account information including but not limited to: name, address, cell number, account balance and services we currently have.  They posted a payment to my account for my March balance with a checking account that neither my husband or I are associated with.  When I called them out on the scam, they hung up on me and then forced a 200$ payment on my account with my credit card.  I went into my account, changed the password, shut off auto pay, deleted my credit card information and changed my password.  I also have had 2 Factor Authentication on this account for quite awhile.  How did they have all of my information?  How were they able to access my account to make payments?  How were they able to force a payment form my personal credit card?  This is a breach of security.  I called the customer service line and they said that my "account is fine" and that no one had access to my account or information.  100% not true and totally unacceptable.  What steps are you taking to secure our data and personal information?