Charter Communications Confirms Breach After ShinyHunters Extortion
Charter Communications confirmed a data breach after the ShinyHunters group listed it on their leak site and threatened to publish stolen data. The attackers claimed access via vishing that compromised an employee's Microsoft Entra ID account, targeting SaaS applications including Salesforce. The company stated that no sensitive personal customer information or CPNI was exfiltrated.
- customer names
- email addresses
- addresses
- phone numbers
- plan information
- support tickets
Charter Communications has confirmed a data breach after the ShinyHunters extortion group listed the telecommunications provider on its leak site and threatened to publish stolen customer records.
Public reporting indicates the attackers gained initial access through vishing that compromised an employee’s Microsoft Entra ID account, then moved laterally to SaaS applications including Salesforce. The data set offered for sale or extortion contains customer names, email addresses, physical addresses, phone numbers, service plan details, and support ticket information. Charter stated that no sensitive personal customer information or Customer Proprietary Network Information (CPNI) was exfiltrated. The precise number of affected customers remains undisclosed. Industry research from sources such as DoxxScan™ continuous monitoring indicates that telecommunications providers have become frequent targets because subscriber records serve as reliable anchors for subsequent identity-based attacks.
Want the rest of this breakdown?
Sign up free to keep reading. Members get extended access, the weekly breach digest, and a complimentary DoxxScan™ to see if their identity is exposed in the breaches we cover.
A breach leaks your credentials. Then hackers chain those credentials to your address, family, phone, and employer using public broker sites. We’re the only tool built around that chain.
⚠ Were you in this breach?
Free email scanner. We check your address against 15B+ leaked records (including this breach) in 15 seconds — then show you the $14.99 cleanup that removes you from the broker sites aggregating leaked data.
Check my email — free →
