Data Breach Notifications

Entity Information

  • Type of Organization: Other Commercial
  • Entity Name: CenturyLink Communications
  • Street Address: 100 CenturyLink Drive
  • City: Monroe
  • State, or Country if outside the US: LA
  • Zip Code: 71203

Submitted By

  • Name: Brian Hughes
  • Title: Assistant General Counsel
  • Firm name (if different than entity): CenturyLink Communications
  • Telephone Number: 314-628-7985
  • Email Address: brian.hughes@centurylink.com
  • Relationship to entity whose information was compromised: employee

Breach Information

  • Total number of persons affected (including residents): Approximately 1942
  • Total number of Maine residents affected: 1
  • If the number of Maine residents exceeds 1,000, have the consumer reporting agencies been notified:
  • Date(s) Breach Occured: Over the course of 08/20/2020 to 08/31/2020
  • Date Breach Discovered: On or about 08/20/2020
  • Description of the Breach:
    • External system breach (hacking)
    • If other, please specify: •Username (and Password) •Email address •First name, Last name •Service Address, Billing Address •Security Question – the answer is masked and not visible •Notification preferences – opt-in/out of various email and SMS notifications •List of accounts associated to the username •Billing records – up to 12-18 months •Billing preferences – paper or paperless •Current products / services •Qualified upgrades •Recent Order activity if applicable •Voice mail if applicable •Payment History •Payment preference – autopay or one-time •Last 4-digits of payment instrument on file •And similar types of account information
  • Information Acquired - Name or other personal identifier in combination with:

Notification and Protection Services

  • Type of Notification: Written
  • Date(s) of consumer notification: Notice mailing conducted by third party vendor on a rolling basis beginning 09/21/2020, with all letters in the mail by 09/25/2020.
  • Copy of notice to affected Maine residents: MyCenturyLink - Customer Notice Letter FINAL 9-18.pdf
  • Date of any previous (within 12 months) breach notifications:
  • Were identity theft protection services offered: No
  • If yes, please provide the duration, the provider of the service and a brief description of the service: