data breach

A family member recently bought a new cellphone from the local Xfinity store.  Several days later, I started receiving phone calls from Xfinity/Comcast, asking if I was satisfied with the service.  Initially, I blew these phone calls off.  I decided the only way the calls would stop was for me to complete their ridiculous survey.  So, I answered and interacted with a scammer.  I didn't realize this until i neared the end of the call.  The scammer was claiming that Xfinity was offering 45% off the monthly bill for seniors.  Thankfully, I was able to hang up, call my bank, and change all of my passwords.  And now I realize that the only way scammers would know that I am an Xfinity customer was if the scammers mined my information from the Xfinity database!  How can a corporation this size be vulnerable to data breaches!  I am astounded!  BTW, I am STILL getting phone calls from the scammers (I know by the area codes.)  I, of course, don't answer but I should not have to be harassed by these criminals because Xfinity cannot protect my information. Worse still, there is NOTHING I can do about it.  I"m glad I don't have Xfinity protecting anything else.