Find notable cyber news and cases, enriched with sources, timelines, and signals.

Charter Communications Salesforce data leak exposes 4.9 million accounts

Data Leak
First reported
Last updated
Happening score
H score 27
1 unique sources, 1 articles

Summary

Hide ▲

The public leak of Charter Communications data exposed 4.9 million accounts, putting names, email addresses, phone numbers, and physical addresses into circulation. The stolen records came from a Salesforce instance and were later posted on a dark web leak site after ransom demands were rejected. A smaller employee-directory subset also added job titles to the exposed set.

Related Happenings

Carnival Corporation customer data leak

Data Leak
First: 28.05.2026 13:49 Last: 28.05.2026 13:49 Sources 1

About this happening: **Carnival Corporation** confirmed a **customer data leak** that exposed personal information for **5,995,277 people**, making this a large-scale privacy and identity-risk event....

Charter Communications hit by network compromise linked to ShinyHunters

Incident
First: 26.05.2026 22:46 Last: 26.05.2026 22:46 Sources 1

How related: While Charter has yet to attribute the attack and has not shared further details, the ShinyHunters extortion gang claimed responsibility and told BleepingComputer that they breached the company's systems on April 1 in a voice phishing (vishing) attack that compromised an employee's Microsoft Entra account.

About this happening: **Charter Communications** confirmed a **data breach** tied to **ShinyHunters** extortion, with the company saying it is **alerting authorities** and that **no sensitive personal...

Latest development: 29.05.2026 11:29

Have I Been Pwned analyzed leaked Charter Communications data and confirmed that the incident affected 4.9 million accounts, with exposed records including names, email addresses, job titles, phone numbers, and physical addresses. The published data also included a subset of about 85,000 records from an internal employee directory.

7-Eleven hit by network compromise

Incident
First: 19.05.2026 17:16 Last: 19.05.2026 17:16 Sources 1

About this happening: **7-Eleven** is a **victim-focused breach incident** in which an **unauthorized third party** accessed systems used to store **franchisee documents** on **April 8, 2026**, trigger...

7-Eleven franchisee-docs and Salesforce data leak

Data Leak
First: 18.05.2026 14:25 Last: 18.05.2026 14:25 Sources 1

About this happening: **7-Eleven** confirmed a **April 8, 2026** intrusion into systems used to store **franchisee documents**, and **ShinyHunters** later claimed the theft of **more than 600,000 Sales...

Latest development: 26.05.2026 10:01

Have I Been Pwned analyzed the leaked 7-Eleven data and estimated that the breach exposed personal information for 185,300 people, including names, dates of birth, unique email addresses, phone numbers, and physical addresses. The exposed archive was tied to ShinyHunters' extortion campaign against 7-Eleven and followed the group's leak-site posting after ransom demands were not met.

Unnamed organization stolen data published on DLS

Data Leak
First: 06.05.2026 16:00 Last: 06.05.2026 16:00 Sources 1

About this happening: **Stolen data** from an **unnamed organization** was later posted on a **data leak site (DLS)**, confirming exposure and increasing extortion pressure. The publication followed an...

Timeline

  1. 29.05.2026 11:29 1 articles · 6h ago

    ShinyHunters breaches Charter Communications on April 1 via vishing

    Exploitation Observed

    ShinyHunters claimed it breached Charter Communications on April 1 by using vishing to compromise an employee's Microsoft Entra account and reach the company's Salesforce environment, then said it used that access to steal customer and business records.

    Show sources
  2. 29.05.2026 11:29 2 articles · 6h ago

    Have I Been Pwned confirms 4.9 million Charter Communications accounts were exposed

    Victim Impact Update

    Have I Been Pwned analyzed leaked Charter Communications data and said the incident affected 4.9 million accounts, exposing names, email addresses, phone numbers, physical addresses, and a subset of employee-directory records that included job titles.

    Show sources