Charter Communications Data Breach Exposes 4.9 Million Accounts

• •4.9 million accounts affected by Charter Communications data breach.
• •Attackers used voice phishing to compromise an employee's Microsoft Entra account.
• •ShinyHunters extortion gang claimed responsibility and leaked the stolen data.

In early April 2026, Charter Communications suffered a data breach affecting 4.9 million accounts, attributed to the ShinyHunters extortion gang. The attackers accessed an employee's Microsoft Entra account via a voice phishing attack, allowing them to steal data from the company's Salesforce instance. The stolen information includes names, email addresses, physical addresses, phone numbers, and job titles from an internal directory. Charter confirmed the breach but stated that no sensitive personal information or customer proprietary network information was exfiltrated. After Charter refused to pay the ransom, ShinyHunters leaked the stolen data on their dark web site. The FBI has advised victims not to comply with ransom demands, as it does not guarantee the return or destruction of stolen data.