One million customers on alert as extortion group claims massive Brightspeed data haul

Brightspeed is investigating claims by the Crimson Collective extortion group that it exfiltrated sensitive data for over 1 million residential customers, including PII, account and billing records, payment methods, and appointment/order records; the group posted a 50-entry sample from multiple database tables and threatened to publish more. Brightspeed has confirmed an investigation but has not publicly corroborated the full extent of the theft or any customer-service disruptions allegedly caused by the group.