A phone call may have opened the door to a major telecom security scare involving Charter Communications, the company behind Spectrum. Charter is one of the largest broadband and cable providers in the United States, serving more than 32 million customers across more than 40 states with internet, cable TV, mobile and phone service.
The company has confirmed a cybersecurity incident after the ransomware group ShinyHunters listed it on a leak site. Charter says the most sensitive customer information was not released. However, the hackers claim they stole millions of records, which means customers should stay alert for scams that may follow.
The incident became public after ShinyHunters added Charter to its data leak site. The ransomware group claimed it breached the company’s systems and threatened to release stolen data unless a ransom was paid.
Charter has confirmed it is aware of the situation. The company says it is following security protocols and working with authorities. CyberGuy reached out to Charter for comment. A Charter spokesperson provided this statement:
“We are aware of the situation, following our security protocols and are working with appropriate authorities. Only sales tools used to manage current, past and prospective Business customers were impacted; no CPNI or sensitive PI was released by the threat actor.”
In other words, Charter says the breach affected sales tools used for current, past and prospective business customers. The company also says hackers did not release sensitive personal information or private telecom account data. Private telecom account data can include details tied to someone’s service, account activity or communication services. For customers, the key point is this: Charter says the incident was limited. The hackers are making a much broader claim.
ShinyHunters claims the attack happened on April 1, 2026. The group says it used a voice phishing scam, also known as vishing, to get inside.
A vishing attack usually starts with a phone call. The attacker pretends to be someone trustworthy, often IT support, customer service or a security employee. Then the scammer tries to pressure the person into approving access, sharing a code or opening a company system.
According to ShinyHunters, the attackers obtained access to a Microsoft Entra account belonging to an employee. Microsoft Entra helps companies manage employee logins and access. From there, the group claims it accessed Charter’s Salesforce system. ShinyHunters says it pulled customer names, email addresses, home addresses, phone numbers, phone types, plan information and support ticket data.
The group also claims some private telecom account data was stolen. Charter denies that sensitive personal information or private telecom account data was released. That gap between Charter’s statement and the hackers’ claims is why customers should pay attention.
1 CLICK COST A FATHER $4 MILLION IN BITCOIN TO VISHING SCAMMERS
Even if the most sensitive information was not released, exposed contact details can still create problems. Scammers can use names, email addresses, phone numbers, addresses and service details to make fake messages feel more believable. They may pretend to be Charter, Spectrum, billing support or technical support.
A scammer might claim your account needs verification. They could warn that your service will be disconnected. They may also offer a fake refund or ask you to update your payment information. That is where customers can get caught off guard.
The scam may sound more believable if the person already knows your provider or account details. That does not mean you should panic. It does mean you should slow down before clicking, replying or sharing anything.
This incident also shows why companies need to take phone-based attacks seriously. Hackers no longer need to rely only on malicious emails. Sometimes, they call an employee and talk their way into a system.
Companies should train workers to verify unexpected support calls. They should also limit employee access, monitor unusual logins and use stronger sign-in protections for cloud tools.
Salesforce, Microsoft Entra and other business platforms can hold valuable customer information. That makes them attractive targets. A convincing phone call should never be enough to open the door.
10 SIGNS YOUR PERSONAL DATA IS BEING SOLD ONLINE
You may not control what happens inside a company’s systems, but you can control how quickly you react to suspicious calls, texts, emails and account changes.
Be careful with unexpected calls, texts or emails claiming to come from Charter or Spectrum. Do not click links in surprise messages. Instead, open the official Spectrum app or type the company’s website into your browser.
Never give a one-time login code to someone who calls you. Scammers often ask for these codes because they are trying to break into your account. A real support agent should not need you to read that code out loud.
If you have a Spectrum account, change your password. Use a strong password that you do not use anywhere else. A password manager can help you create and save stronger passwords without having to remember each one. Check out the best expert-reviewed password managers of 2026 at CyberGuy.com.
Log in through the official Spectrum website or app. Review your email address, phone number, billing information and account settings. If anything looks strange, contact Spectrum directly through a verified number.
Scammers may use breach news to send fake payment warnings. They might say your card failed or that your account will be suspended. Do not pay through a link in a text or email. Go directly to your account instead.
If someone calls claiming to be from Charter or Spectrum, do not rely on caller ID. Scammers can spoof real company numbers. Let the call go to voicemail. Then call back using a number from your bill or the official website.
Install strong antivirus software on your devices. It can help detect malicious links, fake websites, malware and other online threats. That extra layer helps if you accidentally click something risky. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at CyberGuy.com.
A data removal service can help reduce how much of your personal information appears on people-search sites and data broker databases. After a breach, scammers often combine leaked information with public records. The less they can find about you online, the harder it becomes to make a scam feel personal. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting CyberGuy.com.
If your personal information appears in a breach, identity theft protection can help you spot suspicious activity faster. Some services monitor the dark web, alert you to possible misuse and help with recovery steps. You can also check your credit reports and consider a credit freeze if you are worried about identity theft. See my tips and best picks on Best Identity Theft Protection at CyberGuy.com.
The Charter data breach story comes down to two very different claims. Charter says the incident affected sales tools for business customers and that hackers did not release sensitive personal or private telecom account information. ShinyHunters claims it stole millions of records with customer details. Until more facts come out, the safest move is to stay alert. Check your account, avoid surprise links and be careful with anyone who calls claiming to be from Charter or Spectrum. Even basic contact information can help a scammer sound more convincing.
Should companies do more to protect your data from phone-based attacks before one employee mistake turns into a breach? Let us know by writing to us at CyberGuy.com.
Sign up for my FREE CyberGuy Report
Copyright 2026 CyberGuy.com. All rights reserved.
