ShinyHunters Publishes Alleged Charter Data; Analysis Finds 4.9 Million Emails
Summary
ShinyHunters published data it says was stolen from Charter, claiming 42 million records. Have I Been Pwned identified 4.9 million unique email addresses. Charter said sales tools were affected and denied CPNI or sensitive personal information was released.
Key points
- ShinyHunters published data it alleges was stolen from Charter Communications; the group claimed the data included more than 42 million customer records and CPNI.
- Have I Been Pwned's analysis found 4.9 million unique email addresses, along with names, addresses and phone numbers.
- The analysis identified 85,000 employee-account records, each containing a job title.
- Charter said sales tools for managing current, former and prospective business customers were impacted and that it was following security protocols and working with authorities.
- Charter disputed the claim that CPNI or sensitive personal information was released by the threat actor.
Article Details
- Victim Organization
- Charter Communications
- Incident Type
- Data breach involving data allegedly stolen and published by ShinyHunters
- Data Types Exposed
- Email addresses, names, addresses, and phone numbers identified in HaveIBeenPwned's analysis
- Employee job titles in approximately 85,000 records, according to the article
- Customer proprietary network information (CPNI) was included in ShinyHunters' claim, but Charter said no CPNI or sensitive personal information was released by the threat actor
- Affected Records
- ShinyHunters claimed over 42 million customer records. HaveIBeenPwned identified 4.9 million unique email addresses and the article reports 85,000 employee-account records; the number of potentially affected individuals appears to be 4.9 million.
- Operational Impact
- Charter said only sales tools used to manage current, past, and prospective business customers were impacted. No further operational disruption was reported.
- Ransom Or Extortion
- ShinyHunters made the data available for download on its leak site. The article says this suggests Charter did not pay to prevent publication; it reports no specific ransom demand or payment.
- Claim Status
- claimed