Brightspeed investigates cyberattack claims by Crimson Collective

As detailed in Silicon Angle, U.S. telecommunications provider Brightspeed is currently investigating claims made by the Crimson Collective hacking group, which alleges a significant breach of its systems and the exfiltration of sensitive customer data. The incident raises concerns about the security of personal information for over one million customers.

The Crimson Collective asserted in late December that it had accessed and stolen the personal information of more than 1 million Brightspeed customers. The alleged compromised data includes names, email addresses, phone numbers, billing and account details, and other personally identifiable information. The group has reportedly released a data sample as proof and is threatening further disclosure if Brightspeed does not respond. Brightspeed, which provides broadband services across 20 states to residential and business users, stated it takes security seriously and is investigating the reports, promising to inform customers, employees, and authorities as more information becomes available.

The Crimson Collective, an extortion-focused group that emerged in September 2025, typically targets cloud environments, particularly those hosted on AWS, for data exfiltration and subsequent public extortion. This incident, following a notable breach claimed against Red Hat, highlights the persistent threat to telecommunications infrastructure and the sensitive data they hold.

Source: Silicon Angle