MisuseTelecom & MediaInformationPrivilege AbuseData MishandlingCustomer Data InvolvedSupply Chain (3P Vendor)Identity (basic)Financial accountFinancial credentialsLowContained

Cogeco

bd_90ed254fb236abf1 · schema v1 · pii pii-v2

Severity

Low

Discovered

Apr 1, 2026

Filed

Aug 10, 2026

To disclose

19 weeks

Affected

Not disclosed

Confidence

66%

Full breach record for Cogeco →2 incidents on file

Breezeline (Cogeco U.S. Finance, LLC) notified customers that third-party support agents improperly used customer information to create unauthorized mobile accounts to receive sales commissions. The incident, discovered in April 2026, involved customer names and payment card details (number, expiry, CVV). Breezeline removed the agents, implemented same-day sales audits, and is offering 2 years of credit monitoring. The situation is contained.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 19 weeks / 131 days

Apr 1, 2026

Discovered

Aug 10, 2026

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Cogeco
norm: cogeco
Domain: corpo.cogeco.com

Name: Cogeco
norm: cogeco
Domain: corpo.cogeco.com
Also named: Cogeco U.S. Finance, LLCdba oflegal entity
Breezelinedba oftrade name
Industry: Telecom & Mediallm

Discovered: Apr 1, 2026
Materiality determined: —
Notification sent: Aug 19, 2026
Affected individuals: Not disclosed
Data types: Identity (basic)Financial accountFinancial credentials
Attack vector: Insider
Threat actor: PartnerFinancial
Third party: via third-party support agents
Initial access: trusted_relationship

During the incident: Initiated a thorough investigation that concluded on July 20, 2026
Took immediate action to prevent further misuse, including removing the agents involved
Developed additional controls with the relevant third-party agent vendor to audit all sales on the same day they happen
Will remove any wrongfully created mobile lines with no usage
Will refund any unauthorized Breezeline Mobile charges by October 15, 2026
Offering complimentary 2-year TransUnion credit monitoring services
Changes made: Developed additional controls with the relevant third-party agent vendor to audit all sales on the same day they happen
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 19 weeks(131 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/cogeco-us-finance-breezeline-20260810.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 10, 2026
Raw hash: f3875b2d4eaa90ea9dac09c2a7a1238b7d273a1ee2db84ebc869d6c09cc401a5

Reporting entityCogeco

Victim entityCogeco

Incidentdiscovered Apr 1, 2026

Stated responseInitiated a thorough investigation that concluded on July 20, 2026

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov