Spectrum Data Breach Exposes 42 Million Records, Sparks Class-Action Lawsuits Charter Communications, the parent company of Spectrum, is facing multiple class-action lawsuits after a cyberattack in early April allegedly exposed over 42 million customer records containing sensitive personal information. At least four complaints were filed last week in federal court in Connecticut, accusing the Stamford-based provider of failing to implement adequate security measures to prevent the breach. The lawsuits, including one filed by New York resident Dana Dang, claim that hackers accessed and posted the stolen data on the dark web, putting affected customers at heightened risk of identity theft, fraud, and financial exploitation. Plaintiffs argue that the breach has forced them to take costly precautions, such as monitoring financial accounts, changing passwords, and investing in credit protection services. According to reports, the breach was carried out by the hacking group ShinyHunters, which gained access through a voice phishing (vishing) attack that compromised an employee’s Microsoft Entra account. The threat actors then exfiltrated millions of records from Charter’s Salesforce instance, including customer names, email addresses, phone numbers, plan details, and some Customer Proprietary Network Information (CPNI). The group also claimed to have stolen customer support ticket data. Charter, one of the largest U.S. telecommunications companies with nearly 32 million customers, has not yet publicly responded to the lawsuits. The breach comes as the company prepares to merge with Cox Communications in May 2025, forming a new entity under Charter’s current leadership and headquarters in Stamford, Connecticut. The plaintiffs are seeking unspecified damages in the ongoing legal action.

The California Office of the Attorney General reported a data breach involving Charter Communications, Inc. on September 1, 2023. The breach involved suspected unauthorized activity on a limited number of Spectrum.net accounts, although the specific breach date is not available. The breach did not result in any significant data leaks or financial losses, and no information was stolen.