Article Details

Original Article Text

Click to Toggle View

Frontier Communications shuts down systems after cyberattack. ​American telecom provider Frontier Communications is restoring systems after a cybercrime group breached some of its IT systems in a recent cyberattack. Frontier is a leading U.S. communications provider that provides gigabit Internet speeds over a fiber-optic network to millions of consumers and businesses across 25 states. After discovering the incident, the company was forced to partially shut down its systems to prevent the threat actors from laterally moving through the network, which also led to some operational disruptions. Despite this, Frontier says the attackers could access some PII data, although it didn't share if it belonged to customers, employees, or both. "On April 14, 2024, Frontier Communications Parent, Inc. [..] detected that a third party had gained unauthorized access to portions of its information technology environment," the company revealed in a filing with the U.S. Securities and Exchange Commission on Thursday. "Based on the Company's investigation, it has determined that the third party was likely a cybercrime group, which gained access to, among other information, personally identifiable information." Frontier now believes that it has contained the breach, has since restored its core IT systems affected during the incident, and is also working on restoring normal business operations. As BleepingComputer found, the company currently displays warnings on its website cautioning users that it's experiencing internal support technical issues and that "residential and business networks are not affected." ​Frontier's mobile apps are also down, with the same warning message being displayed after launching the application. Despite the company's assurances, many customers have been reporting that their Internet connection has been down since early morning and that support phone numbers are playing prerecorded messages instead of redirecting to a human operator. "The Company continues to investigate the incident, has engaged cybersecurity experts, and has notified law enforcement authorities," Frontier added in the SEC filing. "The Company does not believe the incident is reasonably likely to materially impact the Company’s financial condition or results of operations." A Frontier spokesperson was not immediately available for comment when contacted by BleepingComputer earlier today.

Daily Brief Summary

CYBERCRIME // Frontier Communications Hit by Cybercrime, Systems Disrupted

Frontier Communications experienced a cyberattack, forcing a partial shutdown of its IT systems to curtail further unauthorized access.

The breach, attributed to a cybercrime group, involved the exposure of personally identifiable information (PII), though it is unclear if the data pertains to customers or employees.

Following the attack, identified on April 14, 2024, Frontier has managed to contain the breach and has begun restoring its core IT systems and business operations.

The company has reported operational disruptions, including affected customer service capabilities, with its mobile apps down and Internet connectivity issues reported by users.

Frontier is currently displaying warnings on its website about internal support technical issues but assures that residential and business networks remain unaffected.

Ongoing measures include working with cybersecurity experts, continuous investigation of the breach, and notification to law enforcement authorities.

Despite the incident, Frontier believes the breach is not likely to materially impact its financial condition or results of operations as per their SEC filing.