Security researcher Ryan Stevenson spotted a vulnerability in Comcast Xfinity’s in-home authentication system, which exposed the partial home addresses and partial Social Security numbers of 26.5 million customers.