ShinyHunters compromised Charter Communications (Spectrum) in early April 2026 by using a voice phishing call to manipulate an employee into surrendering Microsoft Entra credentials, then using that access to exfiltrate personally identifiable information on approximately 4.9 million customer accounts from Charter’s Salesforce environment. The attack required no software vulnerability, it exploited authentication process gaps and the absence of phishing-resistant MFA on identity and SaaS platforms. Charter disputes ShinyHunters’ claims that sensitive telecommunications records were stolen, but the disclosure conflict itself creates regulatory and reputational exposure regardless of what data was ultimately taken.