Technology
Massive data breach exposes over 3 million Americans' personal information to cybercriminals
A debt collection enterprise called Financial Business and Consumer Solutions (FBCS) has been impacted by a massive data breach that affects millions of Americans. FBCS is a debt collection agency that specializes in recovering charged-off consumer and commercial debts, such as car loans, health care bills, utility bills, student loans and credit cards.
The initial tally of those affected was around 1.9 million, which the company raised to 3 million in June 2024. The data breach leaked a treasure trove of consumer data, including full name, Social Security number (SSN), date of birth, and driver’s license number or ID card. The company has informed affected individuals as well as concerned authorities.
GET SECURITY ALERTS, EXPERT TIPS – SIGN UP FOR KURT’S NEWSLETTER – THE CYBERGUY REPORT HERE
What happened?
According to a data breach notification sample the firm shared with the authorities, threat actors accessed FBCS’ systems on Valentine’s Day, but the company didn’t realize the breach had occurred until Feb. 26. FBCS describes the incident as “unauthorized access to certain systems in its network.”
What’s concerning is that FBCS didn’t send the notification of the data breach until late April. “This notification was not delayed as a result of a law enforcement investigation,” the company says, maintaining it was conducting its own probe while notifying federal authorities.
The notification indicates that leaked information could include a variety of personal details, such as names, addresses, dates of birth, Social Security numbers, driver’s licenses, state IDs, medical claim information, and even medical records. However, FBCS clarifies that not everyone affected will have all of this data exposed.
Customer service rep (FBCS)
PHARMA GIANT’S DATA BREACH EXPOSES PATIENTS’ SENSITIVE INFORMATION
What is FBCS doing about the data breach?
FBCS is taking several steps to make things right. “Upon discovering this incident, we immediately took steps to conduct a diligent investigation to confirm the nature and scope of the incident. As part of FBCS’s ongoing commitment to the security of information on our platform, we also implemented additional safeguards in a newly built environment,” the company said in the notification.
The company is also providing affected individuals a free 24-month credit monitoring and identity restoration service. This data breach may make you more susceptible to phishing, identity theft, and other social engineering attacks. To protect yourself, be careful about what information you share and closely monitor your bank account activity for any suspicious transactions.
We reached out to FBCS for a comment on this article but did not hear back by our deadline.
A woman working on her laptop (Kurt “CyberGuy” Knutsson)
MASSIVE FREE VPN DATA BREACH EXPOSES 360 MILLION RECORD
6 measures to take to protect yourself from a data breach
If you’ve been impacted by this data breach, follow these steps to protect your personal data and privacy.
1) Invest in identity theft protection: If you think your personal data has been leaked, scammers may try to impersonate you to gain access to your private information. The best thing you can do to protect yourself from this type of fraud is to subscribe to an identity theft service. If you’re eligible, take the free CyEx subscription FBCS is offering.
Identity theft companies can monitor personal information like your Social Security number (SSN), phone number and email address and alert you if it is being sold on the dark web or being used to open an account. They can also assist you in freezing your bank and credit card accounts to prevent further unauthorized use by criminals. See my tips and best picks on how to protect yourself from identity theft.
2) Place a fraud alert: If you suspect you are a victim, contact the three major credit reporting agencies (Equifax, Experian or TransUnion) and request a fraud alert to be placed on your credit file. This will make it more difficult for identity thieves to open new accounts in your name without verification.
3) Be cautious of phishing attempts: Be vigilant about emails, phone calls or messages from unknown sources asking for personal information. Avoid clicking on suspicious links or providing sensitive details unless you can verify the legitimacy of the request.
The best way to protect yourself from clicking malicious links that install malware that may get access to your private information is to have antivirus protection installed on all your devices. This can also alert you of any phishing emails or ransomware scams. Get my picks for the best 2024 antivirus protection winners for your Windows, Mac, Android & iOS devices.
4) Check Social Security benefits: It is crucial to periodically check your Social Security benefits to ensure they have not been tampered with or altered in any way, safeguarding your financial security and preventing potential fraud.
5) Invest in personal data removal services: While no service promises to remove all your data from the internet, having a removal service is great if you want to constantly monitor and automate the process of removing your information from hundreds of sites continuously over a longer period of time. Remove your personal data from the internet with my top picks here.
6) Change your password: You can render a stolen password useless to thieves simply by changing it. Opt for a strong password – one you don’t use elsewhere. Even better, consider letting a password manager generate one for you.
TICKETMASTER DATA BREACH EXPOSES 560 MILLION CUSTOMERS’ DATA SAYS IT GROUP
Kurt’s key takeaway
Data breaches and cyberattacks in the U.S. are on the rise. Companies are responsible for protecting customer data, and the least they can do is inform impacted individuals promptly when a cyberattack occurs. FBCS delayed the notification, which might have given attackers time to target unprepared individuals. If you think your data has been compromised, it’s best to take a proactive approach. Start by changing your passwords and monitoring your bank accounts for unknown transactions.
Do you trust companies to safeguard your personal data? Why or why not? Let us know by writing us at Cyberguy.com/Contact
For more of my tech tips & security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter
Ask Kurt a question or let us know what stories you’d like us to cover
Follow Kurt on his social channels
Answers to the most asked CyberGuy questions:
Copyright 2024 CyberGuy.com. All rights reserved.
Tan and countless other DIYers are attracting millions of views showing off the personal computers they’ve built inside purses, jewelry boxes, toys, and old tech, hiding Raspberry Pi boards inside art projects.
Cyberdecks, but make it fashion
The colorful, quirky builds popping up across social media are a drastic shift away from the typical look the cyberdecks we’ve featured have had, which often consisted of a 3D-printed chassis or a rugged box like a Pelican case, usually with a cyberpunk-style design.
Inside, these homemade devices are essentially mini Linux computers for specific tasks, usually done offline, like reading, journaling, or listening to music. But now, a cyberdeck doesn’t have to look like a computer at all.
NEWYou can now listen to Fox News articles!
A phone call may have opened the door to a major telecom security scare involving Charter Communications, the company behind Spectrum. Charter is one of the largest broadband and cable providers in the United States, serving more than 32 million customers across more than 40 states with internet, cable TV, mobile and phone service.
The company has confirmed a cybersecurity incident after the ransomware group ShinyHunters listed it on a leak site. Charter says the most sensitive customer information was not released. However, the hackers claim they stole millions of records, which means customers should stay alert for scams that may follow.
Join CyberGuy Live: Lock Down Your Phone in 30 Minutes (Saturday, June 13, 10 am ET)
- Your phone holds your email, passwords, photos, banking apps and personal data. In this free, live online class, Kurt the CyberGuy will walk you step by step through simple phone security fixes you can do in real time. You’ll learn how to improve your privacy settings, spot the latest phone scams, use trusted security tools and walk away with a simple checklist to stay protected. Register here: CyberGuyLive.com.
TRANSUNION BECOMES LATEST VICTIM IN MAJOR WAVE OF SALESFORCE-LINKED CYBERATTACKS, 4.4M AMERICANS AFFECTED
Charter says the breach affected business customer sales tools, while hackers claim they stole a much larger set of customer records. (Charter Communications)
What happened in the Charter data breach
The incident became public after ShinyHunters added Charter to its data leak site. The ransomware group claimed it breached the company’s systems and threatened to release stolen data unless a ransom was paid.
Charter has confirmed it is aware of the situation. The company says it is following security protocols and working with authorities. CyberGuy reached out to Charter for comment. A Charter spokesperson provided this statement:
“We are aware of the situation, following our security protocols and are working with appropriate authorities. Only sales tools used to manage current, past and prospective Business customers were impacted; no CPNI or sensitive PI was released by the threat actor.”
In other words, Charter says the breach affected sales tools used for current, past and prospective business customers. The company also says hackers did not release sensitive personal information or private telecom account data. Private telecom account data can include details tied to someone’s service, account activity or communication services. For customers, the key point is this: Charter says the incident was limited. The hackers are making a much broader claim.
What ShinyHunters claims it stole from Charter
ShinyHunters claims the attack happened on April 1, 2026. The group says it used a voice phishing scam, also known as vishing, to get inside.
A vishing attack usually starts with a phone call. The attacker pretends to be someone trustworthy, often IT support, customer service or a security employee. Then the scammer tries to pressure the person into approving access, sharing a code or opening a company system.
According to ShinyHunters, the attackers obtained access to a Microsoft Entra account belonging to an employee. Microsoft Entra helps companies manage employee logins and access. From there, the group claims it accessed Charter’s Salesforce system. ShinyHunters says it pulled customer names, email addresses, home addresses, phone numbers, phone types, plan information and support ticket data.
The group also claims some private telecom account data was stolen. Charter denies that sensitive personal information or private telecom account data was released. That gap between Charter’s statement and the hackers’ claims is why customers should pay attention.
1 CLICK COST A FATHER $4 MILLION IN BITCOIN TO VISHING SCAMMERS
Phone-based phishing attacks can trick employees into giving hackers access to company systems before anyone realizes what happened. (Charter Communications)
Why the Charter breach could affect you
Even if the most sensitive information was not released, exposed contact details can still create problems. Scammers can use names, email addresses, phone numbers, addresses and service details to make fake messages feel more believable. They may pretend to be Charter, Spectrum, billing support or technical support.
A scammer might claim your account needs verification. They could warn that your service will be disconnected. They may also offer a fake refund or ask you to update your payment information. That is where customers can get caught off guard.
The scam may sound more believable if the person already knows your provider or account details. That does not mean you should panic. It does mean you should slow down before clicking, replying or sharing anything.
What companies can learn from the Charter breach
This incident also shows why companies need to take phone-based attacks seriously. Hackers no longer need to rely only on malicious emails. Sometimes, they call an employee and talk their way into a system.
Companies should train workers to verify unexpected support calls. They should also limit employee access, monitor unusual logins and use stronger sign-in protections for cloud tools.
Salesforce, Microsoft Entra and other business platforms can hold valuable customer information. That makes them attractive targets. A convincing phone call should never be enough to open the door.
10 SIGNS YOUR PERSONAL DATA IS BEING SOLD ONLINE
Customers should watch for fake Spectrum messages, billing alerts and support calls that use breach news to sound more convincing. (Charter Communications)
Ways to stay safe after the Charter data breach
You may not control what happens inside a company’s systems, but you can control how quickly you react to suspicious calls, texts, emails and account changes.
1) Watch for fake Charter and Spectrum messages
Be careful with unexpected calls, texts or emails claiming to come from Charter or Spectrum. Do not click links in surprise messages. Instead, open the official Spectrum app or type the company’s website into your browser.
2) Do not share login codes by phone
Never give a one-time login code to someone who calls you. Scammers often ask for these codes because they are trying to break into your account. A real support agent should not need you to read that code out loud.
3) Change your Spectrum password
If you have a Spectrum account, change your password. Use a strong password that you do not use anywhere else. A password manager can help you create and save stronger passwords without having to remember each one. Check out the best expert-reviewed password managers of 2026 at CyberGuy.com.
4) Check your account details
Log in through the official Spectrum website or app. Review your email address, phone number, billing information and account settings. If anything looks strange, contact Spectrum directly through a verified number.
5) Watch for fake billing alerts
Scammers may use breach news to send fake payment warnings. They might say your card failed or that your account will be suspended. Do not pay through a link in a text or email. Go directly to your account instead.
6) Let unknown callers go to voicemail
If someone calls claiming to be from Charter or Spectrum, do not rely on caller ID. Scammers can spoof real company numbers. Let the call go to voicemail. Then call back using a number from your bill or the official website.
7) Use strong antivirus software
Install strong antivirus software on your devices. It can help detect malicious links, fake websites, malware and other online threats. That extra layer helps if you accidentally click something risky. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at CyberGuy.com.
8) Use a data removal service
A data removal service can help reduce how much of your personal information appears on people-search sites and data broker databases. After a breach, scammers often combine leaked information with public records. The less they can find about you online, the harder it becomes to make a scam feel personal. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting CyberGuy.com.
9) Consider identity theft protection
If your personal information appears in a breach, identity theft protection can help you spot suspicious activity faster. Some services monitor the dark web, alert you to possible misuse and help with recovery steps. You can also check your credit reports and consider a credit freeze if you are worried about identity theft. See my tips and best picks on Best Identity Theft Protection at CyberGuy.com.
Kurt’s key takeaways
The Charter data breach story comes down to two very different claims. Charter says the incident affected sales tools for business customers and that hackers did not release sensitive personal or private telecom account information. ShinyHunters claims it stole millions of records with customer details. Until more facts come out, the safest move is to stay alert. Check your account, avoid surprise links and be careful with anyone who calls claiming to be from Charter or Spectrum. Even basic contact information can help a scammer sound more convincing.
Should companies do more to protect your data from phone-based attacks before one employee mistake turns into a breach? Let us know by writing to us at CyberGuy.com.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Sign up for my FREE CyberGuy Report
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
- Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
Copyright 2026 CyberGuy.com. All rights reserved.
Amazon has announced a new version of its fully autonomous warehouse robot, Proteus, that will can interact using language instead of code. The expanded capabilities come as part of a growing pivot toward automation as the e-commerce giant replaces its human workers with robots.
Amazon says the AI-powered upgrade means its human employees can assign the robot tasks in the same way they’d communicate with colleagues. Previously, workers would need to use specialized software to direct the floor-level, tortoise-like systems, which are designed for heavy lifting and moving large carts throughout Amazon’s warehouses. “You tell it what needs to be done. It figures out the priority, the route, the timing,” says Scott Dresser, vice president of Amazon Robotics.
The next generation of Proteus will also work across a much larger area than the ones currently in use, which Amazon says only operate in dock areas. “The new system can work anywhere items need to be moved,” the company says. This includes transporting containers as they arrive on site, moving them between workstations, and assisting employees across fulfillment centers and delivery sites.
The new system is currently being piloted in Amazon’s labs, but the company says it has plans to deploy it in Europe during the first half of 2027.
Proteus is part of Amazon’s broader robotics roadmap. It says it has plans to expand its touch-sensitive robot, called Vulcan, and a collaborative tote-handling system first piloted in Barcelona, to more sites across Europe in the coming year.
Amazon says it is “creating new jobs alongside these technologies” and claims to have hired hundreds of thousands of employees globally since introducing robotics into its operations. The company insists its robots are designed to support workers and streamline operations, rather than replace hundreds of thousands of workers with robots.
-
Los Angeles, Ca14 minutes ago'Top Gun: Maverick' actor identified as victim stabbed to death in Tarzana
-
Detroit, MI36 minutes agoStorm chances return, which could impact Motor City Pride, graduations this weekend across Metro Detroit
-
San Francisco, CA44 minutes agoHilton campaigns in San Francisco as California primary votes still being counted
-
Dallas, TX51 minutes agoCrews cover up AT&T branding as stadium becomes
-
Miami, FL54 minutes agoMiami leaders gather for FIFA World Cup Host Committee Gala
-
Boston, MA59 minutes agoPackage fire outside Boston’s Museum of African American History under investigation
-
Denver, CO1 hour agoRockies beat reporter Patrick Saunders to leave Denver Post
-
Seattle, WA1 hour agoSeattle granted NFL Franchise on this day 52 years ago
