ShinyHunters Publishes Allegedly Stolen Charter Communications Data, Potentially Impacting More Than 5 Million Customers

Views: 403 views

296/69 Tuesday, June 2, 2026

Reports indicate that the cybercriminal group ShinyHunters has published data allegedly stolen from Charter Communications after the company reportedly refused to pay a ransom demand. Charter Communications is one of the largest telecommunications providers in the United States, offering internet, cable television, mobile, and landline phone services under the Spectrum brand to residential and business customers nationwide. The leaked dataset is reported to contain a substantial amount of customer-related information, including Customer Proprietary Network Information (CPNI).

However, the data breach notification service Have I Been Pwned estimated that the number of unique affected individuals is approximately 4.9 million. The exposed information reportedly includes email addresses, names, phone numbers, and physical addresses. In addition, approximately 85,000 records originating from an internal employee directory were found to contain employee job titles. Charter Communications acknowledged the incident and stated that it had activated its security response procedures and was cooperating with relevant authorities. According to the company, the incident affected a sales-related system used to manage information associated with current, former, and prospective business customers. Charter further stated that it found no evidence that sensitive personal information or Customer Proprietary Network Information (CPNI) had been exfiltrated.

ShinyHunters is known for targeting large organizations, stealing data, and using leak sites to pressure victims into paying cryptocurrency-based ransom demands. In recent years, the group has been linked to attacks against organizations such as the European Commission, Odido, Figure, Canada Goose, Rockstar Games, Instructure, Carnival Corporation, 7-Eleven, and SoundCloud. The group’s primary intrusion methods frequently involve social engineering techniques, particularly voice phishing (vishing), to steal credentials and gain access to SaaS platforms such as Salesforce, Okta, and Microsoft.

Source https://securityaffairs.com/192907/uncategorized/shinyhunters-leaks-charter-communications-data-potentially-impacting-5-million-customers.html