U.S. telecommunications giant Charter Communications has confirmed it suffered a data breach after the ShinyHunters extortion group threatened to leak stolen data unless a ransom is paid.
Charter Communications is one of the largest broadband providers in the United States, serving tens of millions of residential and business customers through its Spectrum brand.
In a statement shared this weekend, the company said it is alerting authorities about the incident and that no sensitive personal customer information was stolen.
"We are aware of the situation, following our security protocols and are in the process of alerting appropriate authorities," Charter told BleepingComputer.
"No sensitive personal information (PI) or customer proprietary network information (CPNI) data was exfiltrated by the threat actor as a result of recent activity."
ShinyHunters extorting Charter
This statement follows Charter's listing on the ShinyHunters data leak site, where attackers claimed to have stolen 40 million records containing the personal information of consumer and business customers.
Charter listing on the ShinyHunters data leak site
ShinyHunters claimed to BleepingComputer that they breached Charter on April 1 through a voice phishing (vishing) attack that compromised an employee's Microsoft Entra account.
The threat actors used this access to export millions of consumer and business customer records from the company's Salesforce instance.
... continue reading