Frontier Data Breach: 750,000 Customers Affected After Ransomware Attack

Frontier Communications, a leading U.S. telecom provider, has confirmed a data breach impacting 750,000 customers following a cyberattack in April 2024. The breach occurred in mid-April following a cyberattack claimed by the RansomHub ransomware group.

While Frontier maintains that no financial information was compromised, the leaked data includes customers’ full names and Social Security numbers. According to BleepingComputer, Frontier has begun notifying affected individuals.

ALSO READ:
How Can An Adversary Use Information Available in Public Records to Target You?

Additionally, the company is offering one year of free credit monitoring and identity theft protection services through Kroll.

RansomHub, the group responsible for the attack, listed Frontier on its dark web extortion portal. The group has threatened to sell the stolen data if their demands are not met by June 14th.

Frontier listed on the RansomHub, Frontier data breach, Ransomware Attack — **Frontier listed on the RansomHub | Source: BleepingComputer**

What We Know About the Frontier Data Breach

Timeline

April 14, 2024: Frontier Communications detects unauthorized access to its internal IT systems.
Mid-April: The RansomHub ransomware group launches a cyberattack against Frontier, gaining access to customer data.
Early June: RansomHub claimed responsibility for the attack and threatened to leak or sell the stolen data unless Frontier met their demands by June 14th.
June 4, 2024: RansomHub lists Frontier on its dark web extortion portal and publishes a sample of the stolen data, including full names, addresses, Social Security numbers, and other personal details.
Early June: Frontier begins notifying approximately 750,000 affected customers about the data breach and offers one year of free credit monitoring and identity theft protection services.

Key Facts about Frontier Data Breach

Impacted Customers: Approximately 750,000 customers’ personal information was exposed.
Compromised Data: Full names and Social Security numbers confirmed as breached.
Financial Data: Frontier asserts that no customer financial information was compromised.
RansomHub’s Claims: The group claims to have stolen 5GB of data containing information on 2 million customers.
Frontier’s Response: Notified authorities, offered credit monitoring services to affected customers, and is working to strengthen network security.

Recommendations for Frontier Customers

Be Vigilant: Exercise caution with unsolicited communications.
Change Passwords: Reset passwords for Frontier accounts and other online accounts.
Monitor Finances: Keep a close eye on bank statements and credit reports for suspicious activity.

Frontier has reported the incident to relevant authorities and is taking steps to bolster its network security. The company is also urging customers to be vigilant about unsolicited communications and to consider resetting their account passwords.

This incident marks another instance of RansomHub’s growing activity in the cybercrime landscape. The group is known for data-theft-based extortion tactics and recently acquired the source code for the Knight ransomware.

Customers who believe they may be affected are advised to monitor their financial statements and credit reports for suspicious activity.

Frontier Data Breach: 750,000 Customers Affected After Ransomware Attack