A cyberattack that exposed the personal information of nearly 59,000 Connecticut residents has resulted in a $625,000 settlement between Frontier Communications and state authorities. The agreement follows an investigation that uncovered serious weaknesses in the telecommunications company’s security practices.
Connecticut Attorney General William Tong announced the settlement on October 16, 2026, more than two years after the original breach. Investigators determined that attackers gained access to Frontier’s internal systems in April 2024 by using compromised login credentials belonging to employees and outside vendors.
Once inside the network, the intruders stole unencrypted customer information, including Social Security numbers. The stolen records were subsequently advertised for sale on the dark web, increasing concerns about potential identity theft and financial fraud.
The investigation identified security deficiencies extending beyond the compromised accounts. According to the Attorney General’s Office, Frontier had weaknesses involving access management, network segmentation, encryption, security monitoring, employee training, and procedures for responding to cyberattacks.
Under the settlement, Frontier must pay $625,000 to Connecticut and introduce stronger protections for customer information. These requirements include improved password management, multifactor authentication, enhanced network monitoring, regular security testing, and stricter controls over access to sensitive records.
The company must also maintain a comprehensive information security program, provide appropriate employee training, and strengthen its incident response procedures. An independent security assessment must be completed within one year of the agreement taking effect, with the findings submitted to state authorities.
The Connecticut agreement is separate from a $5.64 million settlement reached in a related federal class action lawsuit in Texas. That settlement covers approximately 750,000 people nationwide and includes two years of complimentary credit monitoring for eligible individuals.
Frontier was acquired by Verizon in January 2026, after the breach occurred. Both companies cooperated with Connecticut’s investigation, while Verizon emphasized that the incident took place before it assumed ownership.
Attorney General Tong said the settlement was intended to hold Frontier accountable for protecting the sensitive information it collected from customers. He also stressed the importance of implementing security improvements to prevent similar incidents.