Internet Providers · ISP · Regulatory action
Charter Spectrum
Headline
Charter was one of the six ISPs compelled to produce records under the FTC's 6(b) orders, so its residential practices were examined at a level of detail the company never disclosed voluntarily - and the report's…
Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.
Charter was one of the six ISPs compelled to produce records under the FTC's 6(b) orders, so its residential practices were examined at a level of detail the company never disclosed voluntarily - and the report's findings on placing customers into sensitive categories, including by race and sexual orientation, and sharing real-time location data with third parties, apply to the studied group. The report did not name which ISP did what, which is itself worth noting: the FTC obfuscated attribution to preserve participant anonymity, so consumers got the aggregate finding without the ability to act on it by switching providers.
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-08-04
Primary source. None recorded — Unverified - heuristic first draft.
Terms
Arbitration
Mandatory arbitration under FAA; excludes disputes over unauthorized use/receipt of service and IP validity disputes from arbitration (those go to court); notably, injunctive relief cannot be awarded by the arbitrator at all (must be sought in court separately) per the enterprise agreement — verify if the residential agreement mirrors this.
Data sharing
Not independently confirmed for residential this pass; enterprise version references CPNI/personally identifiable information handling per Cable Communications Act + Electronic Communications Privacy Act. MAJOR 2026 BREACH (early April 2026; attack details below are largely the attackers' own claims plus Charter's statements to reporters, not re-verified as of Oct 2026; Charter acknowledged the incident to reporters in late May 2026): the ShinyHunters group says it used a VOICE PHISHING (vishing) attack to obtain a Charter employee's Microsoft Entra (Azure Active Directory) credentials, then pivoted into Charter's SALESFORCE CRM environment — the same underlying attack pattern documented across dozens of other companies throughout this entire tracker. ShinyHunters claimed to have exfiltrated 42+ MILLION RECORDS; Charter has not confirmed a count, and breach-notification service Have I Been Pwned reported about 4.9 million unique accounts in the leaked data. Charter told reporters that no sensitive personal information or CPNI was exfiltrated. After Charter reportedly refused the extortion demand, ShinyHunters published portions of the data on its leak site. AT LEAST FOUR separate class actions were filed in Connecticut federal court within weeks (Kent v. Charter Communications and others), alleging Charter failed to maintain reasonable cybersecurity, including inadequate employee training against exactly this kind of social-engineering attack — exposed data reportedly included names, emails, physical addresses, phone numbers, account/plan information, and customer-support ticket details.
Fees and billing
Not itemized this pass.
Contacts
Privacy contact. Not recorded.
Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.
Mailing address. Not recorded.
Evidence
No claims have been itemized for this row yet.
No sources are on file for this row yet.
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy spectrum.com privacy policy (not individually located this pass — verify directly) | Not fetched yet | NOT CONFIRMED |
| Terms of service spectrum.com (Residential Terms of Service; Enterprise version reviewed this pass: enterprise.spectrum.com/.../230120-Enterprise-Service-Agreement-for-the-Web.pdf) | Not fetched yet | NOT CONFIRMED for residential (enterprise version is a direct PDF; residential version not individually located this pass) |
| Website No URL recorded | Not fetched yet | — |
| Primary source No URL recorded Verification: Unverified - heuristic first draft | Not fetched yet | — |
Enforcement
No enforcement actions are linked to this row.
State statute
No HQ state on file, so no state statute applies by headquarters.