Charter Communications Faces Cybersecurity Breach

A recent phone call has raised alarms about a significant telecom security issue involving Charter Communications, the provider of Spectrum. Charter is one of the leading broadband and cable companies in the U.S., serving over 32 million customers across more than 40 states with a variety of services including internet, cable TV, and mobile services. The company has acknowledged a cybersecurity breach reported by the ransomware group ShinyHunters on a leak site. While Charter claims critical customer information was not compromised, the hackers allege they extracted millions of records. Customers need to be vigilant about potential scams following this incident.

You can join a free, live online session called CyberGuy Live: Lock Down Your Phone in 30 Minutes, where cybersecurity expert Kurt the CyberGuy offers phone security advice. This session is scheduled for Saturday, June 13, at 10 am ET, and requires registration at CyberGuyLive.com.

Both Charter Communications and TransUnion have faced recent security threats, emphasizing the need for enhanced cybersecurity measures in the industry.

Details of the Charter Data Breach

The breach became public when ShinyHunters added Charter to its leak site, asserting that they had infiltrated the company’s systems and would release stolen data unless a ransom was paid. Charter confirmed awareness of the breach and is working with authorities, stating that only business customer sales tools were affected. The company reassured that no sensitive personal information (PI) or Customer Proprietary Network Information (CPNI) was divulged. This data includes detailed service or account activity information.

ShinyHunters, however, claims that they accessed the system through a phishing attack on April 1, 2026. Using a method known as vishing, the attackers reportedly gained access by tricking an employee via a phone call. The group allegedly obtained access to Microsoft Entra, which handles employee logins, and extracted data from the company’s Salesforce system. Information reportedly stolen includes customer names, emails, addresses, and support ticket data. Charter disputes the claim that sensitive personal or account information was released.

Potential Impact on Customers

Even without the release of the most sensitive information, exposed contact details can increase scam attempts. Scammers might impersonate Charter or Spectrum support, claim verification issues, or fake refund offers to con customers. It is crucial to be cautious with unexpected communications.

Lessons for Companies

This breach highlights the importance of addressing phone-based cyber threats. Organizations should train employees to verify any surprise calls, limit access to sensitive data, monitor unusual login attempts, and enforce strong sign-in protections.

Systems like Salesforce and Microsoft Entra contain valuable customer data, making them prime targets for attacks. A simple phone call should never be enough to breach security protocols.

Protecting Yourself Post-Breach

• Beware of Phishing Attempts: Be cautious of unexpected texts, calls, or emails claiming to be from Charter or Spectrum. Avoid clicking on unsolicited links. Use the official app or website.
• Avoid Sharing Login Codes: Don’t disclose one-time login codes over the phone. These codes can be used by scammers to access your account.
• Update Your Password: If you have a Spectrum account, change the password. Use strong, unique passwords for each account.
• Verify Account Details: Regularly check your account information for any unauthorized changes. Contact Spectrum directly if you notice anything unusual.
• Ignore Suspicious Billing Alerts: Do not respond to billing alerts from unexpected messages. Always verify through official channels.
• Screen Calls: Let unknown calls go to voicemail and call back using official contact information from your bill.
• Install Antivirus Software: Protect your devices with robust antivirus software to detect malicious activities.
• Consider a Data Removal Service: Limit your information available online through data removal services.
• Use Identity Theft Protection: Monitor for suspicious activities and protect from identity theft using specialized services.

Stay alert and cautious with your data security following the Charter incident. Always verify unexpected requests through trusted channels.