Charter Communications confirms data breach ShinyHunters blamed after threat to leak user info online

Date:
Wed, 27 May 2026 15:15:00 +0000

Description:
ShinyHunters claims 40 million stolen records, including names, but Chartered says no PII taken.

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter Charter Communications
confirmed a breach after ShinyHunters listed it on their leak site Hackers claim 40 million customer records were stolen via a vishing attack on April 1 2026 Attackers allegedly accessed a Microsoft Entra account, pulled data from Salesforce, and exfiltrated customer names, emails, addresses, phone numbers, plan info, and support tickets Charter Communications has confirmed to the media it suffered a data breach and that it was currently alerting the relevant authorities about the incident.

As one of the largest telecommunications and broadband providers in the
United States, Charter offers internet, cable TV, mobile, and phone services to more than 40 US states. It currently has more than 32 million customers in the country. Infamous ransomware actors ShinyHunters added Charter to their data leak site, claiming to have breached the companys systems, and promising to leak the stolen data unless a ransom is paid. Latest Videos From You may like Telus Digital confirms breach - hackers allegedly stole 'almost 1 petabyte of data' ShinyHunters hackers claim to have pinched 7.5 million Carnival cruise emails Aura breach confirmed as over 900,000 consumer records accessed in phishing attack Links to Ghost CMS? Responding to media
inquiries, Charter told BleepingComputer it was aware of the situation, following security protocols, and in the process of alerting appropriate authorities.

"No sensitive personal information (PI) or customer proprietary network information (CPNI) data was exfiltrated by the threat actor as a result of recent activity, the company was cited saying.

At the same time, ShinyHunters claims to have nabbed 40 million records with personal information of both consumer and business customers. The group says that the attack took place on April 1 2026 through a voice phishing (vishing) scam, through which they obtained a Microsoft Entra account belonging to an employee.

Through the account, ShinyHunters operatives accessed Charters Salesforce instance and pulled everything they could from it, which allegedly includes customer names, email addresses, addresses, phone numbers, phone type, plan information, and some CPNI data. Customer support ticket data was also allegedly stolen. Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners
or sponsors By submitting your information you agree to the Terms &
Conditions and Privacy Policy and are aged 16 or over.

Next to TeamPCP, ShinyHunters is currently the most active threat actor out there. The company is known for calling victim companies on the phone, pretending to be IT or customer support, and convincing their targets to either install malware themselves, or run remote desktop management solutions (RMM) and grant the attackers unabated access. The best antivirus for all budgets Our top picks, based on real-world testing and comparisons

Read our full guide to the best antivirus 1. Best overall: Bitdefender Total Security 2. Best for families: Norton 360 with LifeLock 3. Best for mobile: McAfee Mobile Security Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.



======================================================================
Link to news story: https://www.techradar.com/pro/security/charter-communications-confirms-data-br each-shinyhunters-blamed-after-threat-to-leak-user-info-online


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)