CT Settles 2024 Data Breach That Compromised 58000 Residents' Information

HARTFORD, CT — Connecticut has reached a $625,000 settlement with Frontier Communications Parent Inc. to resolve an investigation into an April 2024 data breach that compromised sensitive personal information, including Social Security Numbers, of 58,841 residents. According to Attorney General William Tong, a threat actor used compromised credentials of Frontier employees and vendors to gain access to Frontier’s internal IT systems and exfiltrate un-encrypted personal information. The threat actor later offered the stolen data for sale on the dark web. Connecticut’s investigation identified multiple security failings by Frontier regarding identity and access management, segmentation, logging and monitoring, encryption, incident response, training, and data loss prevention, according to Tong’s office. “Frontier collected and maintained sensitive records for tens of thousands of Connecticut customers, and they had an obligation to secure that data,” Tong said. “Today’s settlement, following a related class action, holds Frontier accountable and requires strong new security measures to ensure this type of breach does not occur again.” Verizon acquired Frontier in January 2026. Frontier and Verizon cooperated with the state’s investigation, Tong said. In response to a request for through its media relations department, the company issued a statement through a spokesperson. “This event took place before Verizon owned Frontier. Our company takes data security very seriously. We are pleased to have reached an amicable resolution.” In addition to the $625,000 payment to the state, the settlement includes injunctive terms to strengthen the company’s data security practices going forward including: • Compliance with Connecticut’s consumer protection and data privacy laws, including the Connecticut Unfair Trade Practices Act, the Connecticut Data Privacy Act, and Connecticut’s data Safeguards Law; • Implementation and maintenance of a comprehensive information security program, including reporting requirements to the CEO; • Implementation of appropriate employee training; • Implementation and maintenance of an incident response plan to prepare for and respond to security incidents; • Implementation of specific security safeguards and requirements with respect to, inter alia, document retention and deletion, logging and monitoring, segmentation, access controls, password management, MFA, encryption, risk assessments, penetration testing, antivirus maintenance, data loss prevention, component hardening, and intrusion and endpoint detection; and • Third-party assessment within one year of the Effective Date and provision of a copy of that report to the Office of the Attorney General. Frontier has reached a separate $5.64 million settlement in a related class action in federal court in Texas that provides nationwide relief to approximately 750,000 individuals and two years of complimentary credit monitoring. This story has been updated with a from Verizon. RELATED Several New Laws Take Effect Oct. 1 In Connecticut Keep reading September 23, 2026, 10:11 am Panelists New State Laws And Policies To Govern Use Of ALPR Data Keep reading September 18, 2026, 4:18 pm Tong Launches Investigation of Messaging App He Calls ‘Cesspool Of Sexual Abuse’ Keep reading September 9, 2026, 1:15 pm Trump Administration Demands Hospitals Emergency Room Records Keep reading Data Privacy And Protection Bill Wins Legislative Approval Keep reading May 4, 2026, 4:23 pm Tong: CT Issued Dozens Of Warnings Of Data Privacy Act In 2025 Keep reading February 6, 2026, 11:18 pm As The Trump Administration And States Push Health Data Sharing, Familiar Challenges Surface Keep reading Connecticut Senate Votes To Regulate AI, Expand Data Privacy Keep reading May 16, 2025, 9:26 pm

According to Attorney General William Tong, a threat actor used compromised credentials of Frontier employees and vendors to gain access to Frontier’s internal IT systems and exfiltrate un-encrypted personal information. The threat actor later offered the stolen data for sale on the dark web. Connecticut’s investigation identified multiple security failings by Frontier regarding identity and access management, segmentation, logging and monitoring, encryption, incident response, training, and data loss prevention, according to Tong’s office. “Frontier collected and maintained sensitive records for tens of thousands of Connecticut customers, and they had an obligation to secure that data,” Tong said. “Today’s settlement, following a related class action, holds Frontier accountable and requires strong new security measures to ensure this type of breach does not occur again.” Verizon acquired Frontier in January 2026. Frontier and Verizon cooperated with the state’s investigation, Tong said. In response to a request for through its media relations department, the company issued a statement through a spokesperson. “This event took place before Verizon owned Frontier. Our company takes data security very seriously. We are pleased to have reached an amicable resolution.” In addition to the $625,000 payment to the state, the settlement includes injunctive terms to strengthen the company’s data security practices going forward including: • Compliance with Connecticut’s consumer protection and data privacy laws, including the Connecticut Unfair Trade Practices Act, the Connecticut Data Privacy Act, and Connecticut’s data Safeguards Law; • Implementation and maintenance of a comprehensive information security program, including reporting requirements to the CEO; • Implementation of appropriate employee training; • Implementation and maintenance of an incident response plan to prepare for and respond to security incidents; • Implementation of specific security safeguards and requirements with respect to, inter alia, document retention and deletion, logging and monitoring, segmentation, access controls, password management, MFA, encryption, risk assessments, penetration testing, antivirus maintenance, data loss prevention, component hardening, and intrusion and endpoint detection; and • Third-party assessment within one year of the Effective Date and provision of a copy of that report to the Office of the Attorney General. Frontier has reached a separate $5.64 million settlement in a related class action in federal court in Texas that provides nationwide relief to approximately 750,000 individuals and two years of complimentary credit monitoring. This story has been updated with a from Verizon. RELATED Several New Laws Take Effect Oct. 1 In Connecticut Keep reading September 23, 2026, 10:11 am Panelists New State Laws And Policies To Govern Use Of ALPR Data Keep reading September 18, 2026, 4:18 pm Tong Launches Investigation of Messaging App He Calls ‘Cesspool Of Sexual Abuse’ Keep reading September 9, 2026, 1:15 pm Trump Administration Demands Hospitals Emergency Room Records Keep reading Data Privacy And Protection Bill Wins Legislative Approval Keep reading May 4, 2026, 4:23 pm Tong: CT Issued Dozens Of Warnings Of Data Privacy Act In 2025 Keep reading February 6, 2026, 11:18 pm As The Trump Administration And States Push Health Data Sharing, Familiar Challenges Surface Keep reading Connecticut Senate Votes To Regulate AI, Expand Data Privacy Keep reading May 16, 2025, 9:26 pm

Connecticut’s investigation identified multiple security failings by Frontier regarding identity and access management, segmentation, logging and monitoring, encryption, incident response, training, and data loss prevention, according to Tong’s office.

“Frontier collected and maintained sensitive records for tens of thousands of Connecticut customers, and they had an obligation to secure that data,” Tong said. “Today’s settlement, following a related class action, holds Frontier accountable and requires strong new security measures to ensure this type of breach does not occur again.” Verizon acquired Frontier in January 2026. Frontier and Verizon cooperated with the state’s investigation, Tong said. In response to a request for through its media relations department, the company issued a statement through a spokesperson. “This event took place before Verizon owned Frontier. Our company takes data security very seriously. We are pleased to have reached an amicable resolution.” In addition to the $625,000 payment to the state, the settlement includes injunctive terms to strengthen the company’s data security practices going forward including: • Compliance with Connecticut’s consumer protection and data privacy laws, including the Connecticut Unfair Trade Practices Act, the Connecticut Data Privacy Act, and Connecticut’s data Safeguards Law; • Implementation and maintenance of a comprehensive information security program, including reporting requirements to the CEO; • Implementation of appropriate employee training; • Implementation and maintenance of an incident response plan to prepare for and respond to security incidents; • Implementation of specific security safeguards and requirements with respect to, inter alia, document retention and deletion, logging and monitoring, segmentation, access controls, password management, MFA, encryption, risk assessments, penetration testing, antivirus maintenance, data loss prevention, component hardening, and intrusion and endpoint detection; and • Third-party assessment within one year of the Effective Date and provision of a copy of that report to the Office of the Attorney General. Frontier has reached a separate $5.64 million settlement in a related class action in federal court in Texas that provides nationwide relief to approximately 750,000 individuals and two years of complimentary credit monitoring. This story has been updated with a from Verizon. RELATED Several New Laws Take Effect Oct. 1 In Connecticut Keep reading September 23, 2026, 10:11 am Panelists New State Laws And Policies To Govern Use Of ALPR Data Keep reading September 18, 2026, 4:18 pm Tong Launches Investigation of Messaging App He Calls ‘Cesspool Of Sexual Abuse’ Keep reading September 9, 2026, 1:15 pm Trump Administration Demands Hospitals Emergency Room Records Keep reading Data Privacy And Protection Bill Wins Legislative Approval Keep reading May 4, 2026, 4:23 pm Tong: CT Issued Dozens Of Warnings Of Data Privacy Act In 2025 Keep reading February 6, 2026, 11:18 pm As The Trump Administration And States Push Health Data Sharing, Familiar Challenges Surface Keep reading Connecticut Senate Votes To Regulate AI, Expand Data Privacy Keep reading May 16, 2025, 9:26 pm

Verizon acquired Frontier in January 2026. Frontier and Verizon cooperated with the state’s investigation, Tong said. In response to a request for through its media relations department, the company issued a statement through a spokesperson. “This event took place before Verizon owned Frontier. Our company takes data security very seriously. We are pleased to have reached an amicable resolution.” In addition to the $625,000 payment to the state, the settlement includes injunctive terms to strengthen the company’s data security practices going forward including: • Compliance with Connecticut’s consumer protection and data privacy laws, including the Connecticut Unfair Trade Practices Act, the Connecticut Data Privacy Act, and Connecticut’s data Safeguards Law; • Implementation and maintenance of a comprehensive information security program, including reporting requirements to the CEO; • Implementation of appropriate employee training; • Implementation and maintenance of an incident response plan to prepare for and respond to security incidents; • Implementation of specific security safeguards and requirements with respect to, inter alia, document retention and deletion, logging and monitoring, segmentation, access controls, password management, MFA, encryption, risk assessments, penetration testing, antivirus maintenance, data loss prevention, component hardening, and intrusion and endpoint detection; and • Third-party assessment within one year of the Effective Date and provision of a copy of that report to the Office of the Attorney General. Frontier has reached a separate $5.64 million settlement in a related class action in federal court in Texas that provides nationwide relief to approximately 750,000 individuals and two years of complimentary credit monitoring. This story has been updated with a from Verizon. RELATED Several New Laws Take Effect Oct. 1 In Connecticut Keep reading September 23, 2026, 10:11 am Panelists New State Laws And Policies To Govern Use Of ALPR Data Keep reading September 18, 2026, 4:18 pm Tong Launches Investigation of Messaging App He Calls ‘Cesspool Of Sexual Abuse’ Keep reading September 9, 2026, 1:15 pm Trump Administration Demands Hospitals Emergency Room Records Keep reading Data Privacy And Protection Bill Wins Legislative Approval Keep reading May 4, 2026, 4:23 pm Tong: CT Issued Dozens Of Warnings Of Data Privacy Act In 2025 Keep reading February 6, 2026, 11:18 pm As The Trump Administration And States Push Health Data Sharing, Familiar Challenges Surface Keep reading Connecticut Senate Votes To Regulate AI, Expand Data Privacy Keep reading May 16, 2025, 9:26 pm

“This event took place before Verizon owned Frontier. Our company takes data security very seriously. We are pleased to have reached an amicable resolution.”

In addition to the $625,000 payment to the state, the settlement includes injunctive terms to strengthen the company’s data security practices going forward including: • Compliance with Connecticut’s consumer protection and data privacy laws, including the Connecticut Unfair Trade Practices Act, the Connecticut Data Privacy Act, and Connecticut’s data Safeguards Law; • Implementation and maintenance of a comprehensive information security program, including reporting requirements to the CEO; • Implementation of appropriate employee training; • Implementation and maintenance of an incident response plan to prepare for and respond to security incidents; • Implementation of specific security safeguards and requirements with respect to, inter alia, document retention and deletion, logging and monitoring, segmentation, access controls, password management, MFA, encryption, risk assessments, penetration testing, antivirus maintenance, data loss prevention, component hardening, and intrusion and endpoint detection; and • Third-party assessment within one year of the Effective Date and provision of a copy of that report to the Office of the Attorney General. Frontier has reached a separate $5.64 million settlement in a related class action in federal court in Texas that provides nationwide relief to approximately 750,000 individuals and two years of complimentary credit monitoring. This story has been updated with a from Verizon. RELATED Several New Laws Take Effect Oct. 1 In Connecticut Keep reading September 23, 2026, 10:11 am Panelists New State Laws And Policies To Govern Use Of ALPR Data Keep reading September 18, 2026, 4:18 pm Tong Launches Investigation of Messaging App He Calls ‘Cesspool Of Sexual Abuse’ Keep reading September 9, 2026, 1:15 pm Trump Administration Demands Hospitals Emergency Room Records Keep reading Data Privacy And Protection Bill Wins Legislative Approval Keep reading May 4, 2026, 4:23 pm Tong: CT Issued Dozens Of Warnings Of Data Privacy Act In 2025 Keep reading February 6, 2026, 11:18 pm As The Trump Administration And States Push Health Data Sharing, Familiar Challenges Surface Keep reading Connecticut Senate Votes To Regulate AI, Expand Data Privacy Keep reading May 16, 2025, 9:26 pm

• Compliance with Connecticut’s consumer protection and data privacy laws, including the Connecticut Unfair Trade Practices Act, the Connecticut Data Privacy Act, and Connecticut’s data Safeguards Law; • Implementation and maintenance of a comprehensive information security program, including reporting requirements to the CEO; • Implementation of appropriate employee training; • Implementation and maintenance of an incident response plan to prepare for and respond to security incidents; • Implementation of specific security safeguards and requirements with respect to, inter alia, document retention and deletion, logging and monitoring, segmentation, access controls, password management, MFA, encryption, risk assessments, penetration testing, antivirus maintenance, data loss prevention, component hardening, and intrusion and endpoint detection; and • Third-party assessment within one year of the Effective Date and provision of a copy of that report to the Office of the Attorney General. Frontier has reached a separate $5.64 million settlement in a related class action in federal court in Texas that provides nationwide relief to approximately 750,000 individuals and two years of complimentary credit monitoring. This story has been updated with a from Verizon. RELATED Several New Laws Take Effect Oct. 1 In Connecticut Keep reading September 23, 2026, 10:11 am Panelists New State Laws And Policies To Govern Use Of ALPR Data Keep reading September 18, 2026, 4:18 pm Tong Launches Investigation of Messaging App He Calls ‘Cesspool Of Sexual Abuse’ Keep reading September 9, 2026, 1:15 pm Trump Administration Demands Hospitals Emergency Room Records Keep reading Data Privacy And Protection Bill Wins Legislative Approval Keep reading May 4, 2026, 4:23 pm Tong: CT Issued Dozens Of Warnings Of Data Privacy Act In 2025 Keep reading February 6, 2026, 11:18 pm As The Trump Administration And States Push Health Data Sharing, Familiar Challenges Surface Keep reading Connecticut Senate Votes To Regulate AI, Expand Data Privacy Keep reading May 16, 2025, 9:26 pm

• Implementation and maintenance of a comprehensive information security program, including reporting requirements to the CEO;

• Implementation of appropriate employee training; • Implementation and maintenance of an incident response plan to prepare for and respond to security incidents; • Implementation of specific security safeguards and requirements with respect to, inter alia, document retention and deletion, logging and monitoring, segmentation, access controls, password management, MFA, encryption, risk assessments, penetration testing, antivirus maintenance, data loss prevention, component hardening, and intrusion and endpoint detection; and • Third-party assessment within one year of the Effective Date and provision of a copy of that report to the Office of the Attorney General. Frontier has reached a separate $5.64 million settlement in a related class action in federal court in Texas that provides nationwide relief to approximately 750,000 individuals and two years of complimentary credit monitoring. This story has been updated with a from Verizon. RELATED Several New Laws Take Effect Oct. 1 In Connecticut Keep reading September 23, 2026, 10:11 am Panelists New State Laws And Policies To Govern Use Of ALPR Data Keep reading September 18, 2026, 4:18 pm Tong Launches Investigation of Messaging App He Calls ‘Cesspool Of Sexual Abuse’ Keep reading September 9, 2026, 1:15 pm Trump Administration Demands Hospitals Emergency Room Records Keep reading Data Privacy And Protection Bill Wins Legislative Approval Keep reading May 4, 2026, 4:23 pm Tong: CT Issued Dozens Of Warnings Of Data Privacy Act In 2025 Keep reading February 6, 2026, 11:18 pm As The Trump Administration And States Push Health Data Sharing, Familiar Challenges Surface Keep reading Connecticut Senate Votes To Regulate AI, Expand Data Privacy Keep reading May 16, 2025, 9:26 pm

• Implementation and maintenance of an incident response plan to prepare for and respond to security incidents; • Implementation of specific security safeguards and requirements with respect to, inter alia, document retention and deletion, logging and monitoring, segmentation, access controls, password management, MFA, encryption, risk assessments, penetration testing, antivirus maintenance, data loss prevention, component hardening, and intrusion and endpoint detection; and • Third-party assessment within one year of the Effective Date and provision of a copy of that report to the Office of the Attorney General. Frontier has reached a separate $5.64 million settlement in a related class action in federal court in Texas that provides nationwide relief to approximately 750,000 individuals and two years of complimentary credit monitoring. This story has been updated with a from Verizon. RELATED Several New Laws Take Effect Oct. 1 In Connecticut Keep reading September 23, 2026, 10:11 am Panelists New State Laws And Policies To Govern Use Of ALPR Data Keep reading September 18, 2026, 4:18 pm Tong Launches Investigation of Messaging App He Calls ‘Cesspool Of Sexual Abuse’ Keep reading September 9, 2026, 1:15 pm Trump Administration Demands Hospitals Emergency Room Records Keep reading Data Privacy And Protection Bill Wins Legislative Approval Keep reading May 4, 2026, 4:23 pm Tong: CT Issued Dozens Of Warnings Of Data Privacy Act In 2025 Keep reading February 6, 2026, 11:18 pm As The Trump Administration And States Push Health Data Sharing, Familiar Challenges Surface Keep reading Connecticut Senate Votes To Regulate AI, Expand Data Privacy Keep reading May 16, 2025, 9:26 pm

• Implementation of specific security safeguards and requirements with respect to, inter alia, document retention and deletion, logging and monitoring, segmentation, access controls, password management, MFA, encryption, risk assessments, penetration testing, antivirus maintenance, data loss prevention, component hardening, and intrusion and endpoint detection; and

• Third-party assessment within one year of the Effective Date and provision of a copy of that report to the Office of the Attorney General. Frontier has reached a separate $5.64 million settlement in a related class action in federal court in Texas that provides nationwide relief to approximately 750,000 individuals and two years of complimentary credit monitoring. This story has been updated with a from Verizon. RELATED Several New Laws Take Effect Oct. 1 In Connecticut Keep reading September 23, 2026, 10:11 am Panelists New State Laws And Policies To Govern Use Of ALPR Data Keep reading September 18, 2026, 4:18 pm Tong Launches Investigation of Messaging App He Calls ‘Cesspool Of Sexual Abuse’ Keep reading September 9, 2026, 1:15 pm Trump Administration Demands Hospitals Emergency Room Records Keep reading Data Privacy And Protection Bill Wins Legislative Approval Keep reading May 4, 2026, 4:23 pm Tong: CT Issued Dozens Of Warnings Of Data Privacy Act In 2025 Keep reading February 6, 2026, 11:18 pm As The Trump Administration And States Push Health Data Sharing, Familiar Challenges Surface Keep reading Connecticut Senate Votes To Regulate AI, Expand Data Privacy Keep reading May 16, 2025, 9:26 pm

Frontier has reached a separate $5.64 million settlement in a related class action in federal court in Texas that provides nationwide relief to approximately 750,000 individuals and two years of complimentary credit monitoring. This story has been updated with a from Verizon. RELATED Several New Laws Take Effect Oct. 1 In Connecticut Keep reading September 23, 2026, 10:11 am Panelists New State Laws And Policies To Govern Use Of ALPR Data Keep reading September 18, 2026, 4:18 pm Tong Launches Investigation of Messaging App He Calls ‘Cesspool Of Sexual Abuse’ Keep reading September 9, 2026, 1:15 pm Trump Administration Demands Hospitals Emergency Room Records Keep reading Data Privacy And Protection Bill Wins Legislative Approval Keep reading May 4, 2026, 4:23 pm Tong: CT Issued Dozens Of Warnings Of Data Privacy Act In 2025 Keep reading February 6, 2026, 11:18 pm As The Trump Administration And States Push Health Data Sharing, Familiar Challenges Surface Keep reading Connecticut Senate Votes To Regulate AI, Expand Data Privacy Keep reading May 16, 2025, 9:26 pm

This story has been updated with a from Verizon.

Several New Laws Take Effect Oct. 1 In Connecticut

Panelists New State Laws And Policies To Govern Use Of ALPR Data

Tong Launches Investigation of Messaging App He Calls ‘Cesspool Of Sexual Abuse’

Trump Administration Demands Hospitals Emergency Room Records

Data Privacy And Protection Bill Wins Legislative Approval

Tong: CT Issued Dozens Of Warnings Of Data Privacy Act In 2025

As The Trump Administration And States Push Health Data Sharing, Familiar Challenges Surface

Connecticut Senate Votes To Regulate AI, Expand Data Privacy