Social EngineeringTelecom & MediaInformationPhishingStolen CredentialsMulti-Stage ChainCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDEmploymentMediumContained

Altice USA, Inc.

bd_c5b245d7b3a5aed9 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 1, 2019

Filed

Feb 6, 2020

To disclose

14 weeks

Affected

Not disclosed

Linked

5 filings

Confidence

64%

Full breach record for Altice USA, Inc. →2 incidents on file

In November 2019, Altice USA experienced a phishing incident where an unauthorized third party gained access to employee email credentials. The attacker used these credentials to access and download mailbox contents, including a password-protected report containing personal information (name, SSN, address, employment info) for employees and a limited number of customers. Altice USA secured accounts, engaged forensics, notified law enforcement, and is providing one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Nov 4, 2019

Begins

Feb 6, 2020

Filed

This filing is one of 5 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_09c6a9be75273f432020-02-06Verified
Indiana State AGbd_0d95d583ad05f5122020-02-06Verified
Montana State AGbd_814aa050fb075bd72020-02-06Candidate
New Hampshire State AGbd_348949068d5d54102020-02-05 · +1dVerified

Name: Altice USA, Inc.
norm: altice usa

Name: Altice USA, Inc.
norm: altice usa
Industry: Telecom & Mediallm

Discovered: Nov 1, 2019
Breach occurred: Nov 4, 2019
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDEmployment
Data elements: Social Security numberDate of birth
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Notified federal law enforcement agencies
Initial access: phishing_link

During the incident: Secured the email accounts
Engaged an expert computer forensics firm to assist with our investigation
Notified law enforcement
Reset passwords for all compromised accounts to prevent further unauthorized access
Offering 1 year of complimentary identity and credit monitoring services through Experian
Changes made: Conducting additional mandatory education to help employees recognize and avoid phishing emails
Revising internal policies and practices to strengthen our internal security standards
Strengthening email system security controls and protocols
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(97 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

New Hampshire State AGFeb 5 · first

Massachusetts State AG+1d

Indiana State AG+1d

Montana State AG+1d

California State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-187076
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 6, 2020
Raw hash: 9d71201c8f6a407e7048c7f2f2f9e5b1cd9d0927eb87b5d4227ad3dcac100d3f

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityAltice USA, Inc.

Victim entityAltice USA, Inc.

Incidentdiscovered Nov 1, 2019

Stated responseSecured the email accounts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov