Skip to content
Tech News
← Back to articles

Charter confirms data breach after ShinyHunters extortion threat

read original get Data Breach Prevention Kit → more articles
Why This Matters

This incident highlights the ongoing threat of cyber extortion and data breaches in the telecommunications industry, emphasizing the importance of robust security measures. For consumers, it underscores the need for vigilance over personal information and the potential risks of social engineering attacks. The breach also serves as a reminder for companies to continually strengthen their cybersecurity defenses to protect sensitive customer data.

Key Takeaways

U.S. telecommunications giant Charter Communications has confirmed it suffered a data breach after the ShinyHunters extortion group threatened to leak stolen data unless a ransom is paid.

Charter Communications is one of the largest broadband providers in the United States, serving tens of millions of residential and business customers through its Spectrum brand.

In a statement shared this weekend, the company said it is alerting authorities about the incident and that no sensitive personal customer information was stolen.

"We are aware of the situation, following our security protocols and are in the process of alerting appropriate authorities," Charter told BleepingComputer.

"No sensitive personal information (PI) or customer proprietary network information (CPNI) data was exfiltrated by the threat actor as a result of recent activity."

ShinyHunters extorting Charter

This statement follows Charter's listing on the ShinyHunters data leak site, where attackers claimed to have stolen 40 million records containing the personal information of consumer and business customers.

Charter listing on the ShinyHunters data leak site

ShinyHunters claimed to BleepingComputer that they breached Charter on April 1 through a voice phishing (vishing) attack that compromised an employee's Microsoft Entra account.

The threat actors used this access to export millions of consumer and business customer records from the company's Salesforce instance.

... continue reading