USCC Services, LLC

USCC Services, LLC, operating as UScellular, reported a data breach that occurred on January 28, 2024, and was discovered the following day. An external system breach (hacking) affected 100 individuals, including 8 Maine residents. The compromised information included names in combination with financial account or credit/debit card numbers and their associated security codes or PINs. Written notifications were sent to the affected individuals on February 16, 2024.

USCC Services, LLC (d/b/a UScellular) detected unauthorized access to its billing system on December 13, 2021, occurring between December 13-19, 2021. Unauthorized individuals accessed wireless customer accounts containing names, addresses, PINs, and phone numbers to fraudulently port numbers. Approximately 405 customers were affected nationwide, including 5 New Hampshire residents. UScellular disconnected affected systems, reset employee credentials, changed customer PINs, and reported the incident to law enforcement and the FCC.

USCC Services, LLC d/b/a UScellular reported a phishing-based breach occurring between December 13 and 19, 2021. The incident affected 405 individuals, including 40 Maine residents. UScellular notified affected consumers in writing on December 27, 2021. No identity theft protection services were offered.

USCC Services, LLC (d/b/a UScellular) reported a data breach in New Hampshire affecting 276 customers, including 23 state residents. Unauthorized individuals gained access to customer accounts via a phishing scam targeting retail employees, leading to credential compromise. Affected data included names, addresses, PINs, phone numbers, and service usage. UScellular reset credentials, changed customer PINs, and notified law enforcement.

USCC Services, LLC d/b/a U.S. Cellular reported a phishing-based external system breach on September 21, 2020, discovered on September 22, 2020. The incident affected 36 individuals, including 2 Maine residents. The company sent written notifications to affected consumers on October 13, 2020. No identity theft protection services were offered.

United States Cellular Corporation reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2017-10-24. 2 Massachusetts residents were affected.

U.S. Cellular filed a supplemental notice with the New Hampshire AG regarding a credential stuffing attack starting in April 2017. The incident exposed customer names, addresses, phone numbers, SSNs, and ACH/bank account data. Approximately 1,852 customers were affected, including 62 in NH. U.S. Cellular reset passwords, disabled accounts for former customers, and offered 12 months of credit monitoring.

U.S. Cellular reported that unauthorized individuals accessed online user accounts starting in April 2017 using automated attacks with stolen credentials from other breaches. Approximately 1,852 customers were affected, including 47 New Hampshire residents. Compromised data included names, SSNs, addresses, phone numbers, and billing info. U.S. Cellular reset passwords, disabled former customer accounts, implemented technical controls, and offered credit monitoring.