CONNECTICUT Attorney General William Tong announced a $625,000 settlement with Frontier Communications Parent Inc., concluding an investigation into a April 2024 data breach that exposed sensitive personal information, including Social Security numbers, of 58,841 Connecticut residents.
The breach involved a threat actor using compromised credentials of Frontier employees and vendors to access Frontier’s internal IT systems and exfiltrate unencrypted data, with the stolen records later offered for sale on the dark web.
The settlement identifies multiple security failings by Frontier relating to identity and access management, segmentation, logging and monitoring, encryption, incident response, training, and data loss prevention.
In addition to the monetary payment, Frontier must implement extensive safeguards going forward: adherence to Connecticut’s consumer protection and data privacy laws; a comprehensive information security programme with reporting to the CEO; employee training; an incident response plan; and specific security measures around document retention, logging, segmentation, access
controls, password management, MFA, encryption, risk assessments, penetration testing, antivirus, data loss prevention, component hardening, and intrusion and endpoint detection. A third-party assessment must be conducted within one year, with a copy of the report provided to the Attorney General’s Office.
Frontier has separately reached a $5.64 million settlement in a related class action in federal court in Texas, covering about 750,000 individuals with two years of complimentary credit monitoring. Verizon had acquired Frontier in January 2026, with cooperation from Frontier and Verizon in the investigation.