Charter confirms Spectrum data breach after ShinyHunters claims hack

A phone call may have opened the door to a major telecommunications security scare involving Charter Communications, the company behind Spectrum. Charter is one of the largest broadband and cable providers in the United States, serving more than 32 million customers in more than 40 states with internet, cable TV, mobile and telephone service.

The company confirmed a cybersecurity incident after ransomware group ShinyHunters listed it on a leak site. Charter says the most sensitive customer information is not disclosed. But hackers claim to have stolen millions of records; This means customers need to be wary of scams that may follow.

Join CyberGuy Live: Lock Your Phone in 30 Minutes (Saturday, June 13, 10 a.m. ET)

• Your phone holds your email, passwords, photos, banking apps, and personal data. In this free, live online class, Kurt the CyberGuy will walk you through simple phone security fixes you can do in real time. You’ll learn how to improve your privacy settings, spot the latest phone scams, use reliable security tools, and walk away with a simple checklist to stay protected. Sign up here: CyberGuyLive.com.

TRANSUNION BECAME THE LATEST VICTIM IN A MAJOR WAVE OF SALESFORCE-RELATED CYBER ATTACKS, AFFECTED 4.4 MILLION AMERICANS

What happened in the Charter data breach?

The incident became public after ShinyHunters added Charter to its data leak site. The ransomware group claimed that the company had breached its systems and threatened to release the stolen data unless the ransom was paid.

Charter confirmed it was aware of the situation. The company says it is following safety protocols and working with authorities. CyberGuy has reached out to Charter for comment. A Charter spokesperson made the following statement:

“We are aware of the situation, complying with our security protocols and working with the appropriate authorities. Only sales tools used to manage current, past and potential Business customers were affected; no CPNI or sensitive PI was issued by the threat actor.”

In other words, Charter says the breach affected sales tools used for current, past and potential business customers. The company also stated that the hackers did not release sensitive personal information or private telecom account data. Private telecom account data may include details tied to someone’s service, account activity, or communications services. The key for customers is this: Charter says the event is limited. The hackers make a much broader claim.

What ShinyHunters claims to have stolen from Charter

ShinyHunters claims that the attack occurred on April 1, 2026. The group says it uses a method also known as a voice phishing scam. avidto get in.

A vishing attack usually starts with a phone call. The attacker typically poses as someone trusted, such as an IT support, customer service or security employee. The scammer then tries to pressure the person to approve access, share a code, or open a company system.

According to ShinyHunters, attackers gained access to an employee’s Microsoft Entra account. Microsoft Entra helps companies manage employee logins and access. From there, the group claims to have accessed Charter’s Salesforce system. ShinyHunters says it collects customer names, email addresses, home addresses, phone numbers, phone types, plan information and support ticket data.

The group also claims that some private telecom account data was stolen. Charter denies disclosing sensitive personal information or private telecom account data. The gap between Charter’s statement and the hackers’ claims shows why customers should pay attention.

1 CLICK COSTS FATHER 4 MILLION DOLLARS OF BITCOIN TO VISHING SCAMMERS

Phone-based phishing attacks can trick employees into allowing hackers to access company systems without anyone realizing what’s happening. (Charter Communication)

Why might a charter violation affect you?

Even if the most sensitive information is not published, exposed contact information can still cause problems. Scammers may use names, email addresses, phone numbers, addresses and service details to make fake messages more believable. They may look like Charter, Spectrum, billing support, or technical support.

A scammer may claim that your account needs to be verified. They may warn that your service will be disconnected. They may also offer fake refunds or ask you to update your payment information. This is where customers can be caught off guard.

If the person already knows your provider or account details, the scam may seem more believable. This doesn’t mean you should panic. This means you need to slow down before clicking, replying or sharing anything.

What can companies learn from violations of the Charter?

This incident also shows why companies should take phone-based attacks seriously. Hackers no longer need to rely solely on malicious emails. Sometimes they call an employee and talk into the system.

Companies should train their employees to verify unexpected support calls. They should also limit employee access, monitor for unusual logins, and use stronger login protections for cloud tools.

Salesforce, Microsoft Entra, and other business platforms can hold valuable customer information. This makes them attractive targets. A convincing phone call should never be enough to open the door.

10 SIGNS THAT YOUR PERSONAL DATA IS BEING SOLD ON THE INTERNET

Customers should watch out for fake Spectrum messages, billing alerts, and support calls that use breach news to appear more convincing. (Charter Communication)

Ways to stay safe after charter data breach

You may not be able to control what happens on a company’s systems, but you can control how quickly you respond to suspicious calls, texts, emails, and account changes.

1) Beware of fake Charter and Spectrum messages

Be wary of any unexpected calls, texts or emails claiming to be from Charter or Spectrum. Don’t click on links in surprise messages. Instead, open the official Spectrum app or type the company’s website into your browser.

2) Do not share access codes over the phone

Never give a single-use access code to someone calling you. Scammers often request these codes because they are trying to break into your account. A real support representative shouldn’t need you to read this code out loud.

3) Change your Spectrum password

If you have a Spectrum account, change your password. Use a strong password that you don’t use anywhere else. A password manager can help you create and save stronger passwords without having to remember each one. Check out the best expert-reviewed password managers of 2026 at: CyberGuy.com.

4) Check your account details

Log in via the official Spectrum website or app. Review your email address, phone number, billing information and account settings. If anything seems odd, contact Spectrum directly via a verified number.

5) Beware of fake invoice warnings

Scammers may use breach notices to send fake payment alerts. They may say that your card has failed or your account will be suspended. Do not pay through a link in a text message or email. Instead, go directly to your account.

6) Allow unknown callers to go to voicemail

If someone calls claiming to be from Charter or Spectrum, don’t trust the caller ID. Scammers may spoof real company numbers. Let the call go to voicemail. Then call back using a number on your bill or official website.

7) Use strong antivirus software

Install strong antivirus software on your devices. It can help detect malicious links, fake websites, malware, and other online threats. This extra layer helps if you accidentally click on something risky. Get my picks for the 2026 winners for the best antivirus protection for your Windows, Mac, Android, and iOS devices at: CyberGuy.com.

8) Use a data removal service

A data removal service can help reduce how much of your personal information appears on people search sites and data broker databases. Following a breach, fraudsters often combine the leaked information with public records. The less they find about you online, the harder it is to make a scam feel personal. Check out my top picks for data removal services and run a free scan to see if your personal information is already on the internet by visiting: CyberGuy.com.

9) Consider protecting against identity theft

If your personal information is discovered to have been breached, identity theft protection can help you detect suspicious activity more quickly. Some services monitor the dark web, alert you to possible abuse, and assist with recovery steps. If you’re worried about identity theft, you can also check your credit reports and consider a credit freeze. See my tips and top picks for Best Identity Theft Protection at: CyberGuy.com.

Kurt’s important takeaways

The Charter data breach story is based on two different allegations. Charter said the incident affected sales tools for enterprise customers and that the hackers did not publish sensitive personal or private telecom account information. ShinyHunters claims to have stolen millions of records containing customer details. Until more facts emerge, the safest course of action is to remain vigilant. Check your account, avoid surprise connections, and be wary of anyone calling claiming to be from Charter or Spectrum. Even basic contact information can help a scammer appear more convincing.

Should companies do more to protect your data from phone-based attacks before a single employee mistake turns into a breach? Let us know by writing to us. CyberGuy.com.

CLICK TO DOWNLOAD FOX NEWS APPLICATION

Sign up for my FREE CyberGuy Report

• Get my best tech tips, urgent safety alerts and special deals straight to your inbox.
• For simple, real-world ways to spot scams early and stay protected, visit: CyberGuy.com – Trusted by millions of people who watch CyberGuy on TV every day.
• Plus, when you join you’ll get instant access to my Ultimate Scam Survival Guide for free.

Copyright 2026 CyberGuy.com. All rights reserved.