Charter Communications Confirms Cybersecurity Incident Amid ShinyHunters Extortion Threats Charter Communications, a major U.S. telecommunications provider operating under the Spectrum brand, has acknowledged a cybersecurity incident after the ShinyHunters extortion group claimed to have breached its systems and stolen data belonging to over 42 million customers. The threat actor added Charter to its leak site this week, alleging the company ignored extortion demands and warning that the stolen data will be released if negotiations do not begin by May 27, 2026. ShinyHunters claims the breach exposed personally identifiable information (PII), though the exact nature of the compromised data remains unverified. In a statement to CyberInsider, a Charter spokesperson confirmed the company is investigating the incident and collaborating with authorities, asserting that "no sensitive personal information (PI) or customer proprietary network information (CPNI) was exfiltrated." However, Charter has not disclosed how the attackers gained access or whether internal systems were disrupted. The breach appears connected to a large-scale campaign targeting Salesforce environments and enterprise cloud infrastructure, where ShinyHunters has exploited exposed credentials, authentication tokens, or misconfigured integrations. Earlier this month, the group claimed responsibility for compromising hundreds of organizations in a Salesforce-focused operation, leveraging vulnerabilities in cloud credentials and third-party SaaS platforms. ShinyHunters has emerged as one of the most active cybercrime groups targeting enterprise cloud environments, with recent attacks on outsourcing providers, SaaS platforms, and educational technology firms. The group typically steals large datasets before demanding ransom under threats of public disclosure. As of now, Charter has not confirmed the number of affected customers or whether impacted individuals will be notified. The investigation remains ongoing.

Charter Communications Hit by ShinyHunters Extortion Campaign, 4.9M Records Leaked Last week, Charter Communications was targeted in a "pay or leak" extortion attack by the cybercriminal group ShinyHunters. The breach resulted in the exposure of 4.9 million unique email addresses, along with associated names, phone numbers, and physical addresses. The leaked data was subsequently published online. Analysis revealed that 68% of the compromised email addresses were already linked to LinkedIn profiles, suggesting a significant overlap with professional networks. The incident highlights the growing trend of extortion-based breaches, where threat actors demand payment to prevent public disclosure of stolen data. Charter Communications, a major U.S. telecommunications provider, has not yet issued a detailed public statement on the breach. The full scope of the impact including potential downstream risks such as phishing or identity theft remains under assessment. The incident underscores the persistent threat posed by cybercriminal groups leveraging stolen data for financial gain.

Cybersecurity Incident Impacts Instructure, Potential UNR Data Exposure Under Investigation The University of Nevada, Reno (UNR) disclosed a cybersecurity incident involving Instructure, the vendor behind the Canvas learning management system. In a statement released Wednesday by UNR President Brian Sandoval, the university confirmed that Instructure experienced a data breach, though it remains unclear whether UNR-specific data was compromised. According to Instructure’s report to the Nevada System of Higher Education (NSHE), exposed information may include names, institutional email addresses, student ID numbers, and private Canvas messages. The company stated that no evidence suggests passwords, dates of birth, government identifiers, or financial data were affected, and the incident has been contained. A forensic investigation is ongoing. UNR is collaborating with NSHE to determine whether its data was impacted and will provide updates as more details emerge. In the interim, the university advised the campus community to remain vigilant against phishing attempts, particularly unsolicited messages requesting login credentials or personal information. Suspicious activity should be reported to [email protected]. The full scope of the breach and its potential impact on UNR users are still under assessment.

Charter Communications Hit by ShinyHunters Phishing Attack, Faces Class-Action Lawsuits Cybercriminal group ShinyHunters claimed responsibility for a phishing attack targeting a Charter Communications employee’s Microsoft Entra account, resulting in the theft of customer proprietary network information, email addresses, and phone numbers. The breach was disclosed in a complaint filed in the U.S. District Court for the District of Connecticut on Thursday, though Charter parent company of Spectrum previously stated that no sensitive personal data was compromised. The incident has sparked class-action lawsuits from residents of Texas and North Carolina, who allege negligence by the telecommunications provider. The lawsuits, filed in federal court, follow Charter’s acknowledgment of the breach, which was first reported by Bloomberg Law. The attack highlights ongoing risks of phishing-based credential theft, particularly in enterprise environments relying on cloud-based identity systems. While Charter maintains that the breach did not expose highly sensitive data, the legal fallout underscores the growing scrutiny of corporate cybersecurity practices in the wake of high-profile breaches.

The California Office of the Attorney General reported a data breach involving Charter Communications on February 10, 2023. The breach occurred on December 21, 2022, involving suspicious activity on customer accounts. The number of affected individuals and the types of information compromised are unknown.

A vulnerability in the website of Charter Communications, a cable and Internet provider that exposed the personal account details of its customers. The exposed data did not include credit card numbers. The company investigated the issuse and fix it within hours.