Social EngineeringTelecom & MediaInformationPhishingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedPIIIdentity (basic)Government IDEmploymentHighActive

Altice USA, Inc.

bd_814aa050fb075bd7 · schema v1 · pii pii-v1

Severity

High

Discovered

Nov 1, 2019

Filed

Feb 6, 2020

To disclose

14 weeks

Affected

1,078state residents only

Linked

5 filings

Confidence

66%

Full breach record for Altice USA, Inc. →2 incidents on file

Altice USA notified Montana residents of a November 2019 phishing incident where unauthorized parties accessed employee email accounts. Stolen credentials allowed download of mailboxes containing PII (names, SSNs, DOBs, driver's licenses). Altice secured accounts, engaged forensic investigators, notified law enforcement, reset passwords, and provided one year of credit monitoring via Experian.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 14 weeks / 97 days

Nov 1, 2019

Begins

Nov 1, 2019

Discovered

Feb 6, 2020

Filed

This filing is one of 5 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_09c6a9be75273f432020-02-06Verified
Indiana State AGbd_0d95d583ad05f5122020-02-06Verified
California State AGbd_c5b245d7b3a5aed92020-02-06Verified
New Hampshire State AGbd_348949068d5d54102020-02-05 · +1dVerified

Name: Altice USA, Inc.
norm: altice usa

Name: Altice USA, Inc.
norm: altice usa
Industry: Telecom & Mediallm

Discovered: Nov 1, 2019
Breach occurred: Nov 1, 2019
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 20, 2020
Affected individuals: 1,078state-resident count only
Data types: PIIIdentity (basic)Government IDEmployment
Data elements: Social Security numberDate of birth
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: informed federal law enforcement agencies about the incident
Initial access: phishing_link

During the incident: Secured the email accounts
Engaged an expert computer forensics firm to assist with our investigation
Notified law enforcement
Reset passwords for all compromised accounts
Conducting additional mandatory education to help employees recognize and avoid phishing emails
Revising internal policies and practices to strengthen our internal security standards
Strengthening email system security controls and protocols
Secured the services of Experian to provide complimentary identity and credit monitoring services
Changes made: Conducting additional mandatory education to help employees recognize and avoid phishing emails
Revising internal policies and practices to strengthen our internal security standards
Strengthening email system security controls and protocols
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(97 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

New Hampshire State AGFeb 5 · first

Massachusetts State AG+1d

Indiana State AG+1d

California State AG+1d

Montana State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/General-Notice-53.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 6, 2020
Raw hash: c725f0ba73aa71fde3898ef6aff0a6260044360f71cd9574a39247c7fb84ea14

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityAltice USA, Inc.

Victim entityAltice USA, Inc.

Incidentdiscovered Nov 1, 2019

Stated responseSecured the email accounts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov