Did Crimson Collective hack Brightspeed?

Crimson Collective claims to have accessed over one million Brightspeed customer records, but Brightspeed is still actively investigating these allegations and has not confirmed a breach.

What kind of data does Crimson Collective claim to have stolen from Brightspeed?

The group claims to have stolen personally identifiable information (PII) including names, addresses, Social Security numbers, and more.

How can I protect myself if my Brightspeed data was breached?

You should change your Brightspeed password, monitor your accounts for suspicious activity, and consider using a password manager and data removal services.

Home / Technology / One Million Brightspeed Customers at Risk?

One Million Brightspeed Customers at Risk?

18 Jan

•

Summary

Hackers claim access to over one million customer records.
Stolen data includes PII like names, addresses, and SSNs.
Brightspeed is actively investigating the potential cybersecurity event.

One Million Brightspeed Customers at Risk?

Broadband provider Brightspeed is currently investigating claims made by the hacker group Crimson Collective, which alleges the theft of sensitive data impacting over one million customers. The group has posted on Telegram, threatening to release sample data if the company does not respond. While Brightspeed has not confirmed a breach, they are actively probing the potential cybersecurity event.

The Crimson Collective asserts that the compromised data includes personally identifiable information such as names, addresses, and Social Security numbers. Such a breach could significantly increase the risk of identity theft and fraud for affected individuals. Brightspeed has stated it takes the situation seriously and is rigorously monitoring threats while working to understand the scope of the alleged incident.

This alleged incident follows previous high-profile targets by Crimson Collective, including a breach impacting Red Hat and a subsequent data exposure affecting Nissan customers in Japan. Brightspeed, a provider focused on underserved rural and suburban areas, has not yet issued a public notice confirming customer data exposure on its website or social media channels.