Brightspeed Data Breach Lawsuit: Where the Case Stands
Case Dismissed
In January 2026 an extortion group claimed it had stolen records on more than 1 million Brightspeed internet customers. Brightspeed said in January it was investigating; we found no public confirmation of the theft. Several class actions followed in federal court in Charlotte, North Carolina. Three were merged in March 2026. In June 2026 the docket shows a settlement notice, a stay and voluntary dismissals. There is no class settlement, no fund and no claim form.
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
Independent information service: Settlement Insight is not the settlement administrator, is not affiliated with or endorsed by the company named above, and is not a law firm. Submitting this form does not file a claim — it shares your information with our participating legal intake partners, who may contact you about your options.
What the Brightspeed Data Breach Claim Says
Brightspeed is a Charlotte-based broadband and phone provider operating in 20 states. On January 4, 2026, a group calling itself Crimson Collective posted on Telegram that it held personal data on more than 1 million residential customers. It later released a sample of 50 entries from each of several database tables.
According to the group's own description, the records include names, email addresses, phone numbers, billing and service addresses, account status, payment history, and saved payment methods with masked card numbers (last 4 digits), expiry dates and card BINs. These are the attacker's claims, not established facts. The group also claimed it had disconnected customers; that was not corroborated.
The lawsuits allege that Brightspeed failed to secure customer data, did not use adequate encryption, and unreasonably delayed telling customers. They sought damages, better security, credit monitoring and attorneys' fees. Brightspeed has not conceded any of this.
Case details
The Brightspeed lawsuit filings are in the U.S. District Court for the Western District of North Carolina, and the defendant is Connect Holding LLC / Connect Holding II LLC, doing business as Brightspeed.
The lead case is Polner v. Connect Holding LLC, No. 3:26-cv-00014, filed January 7, 2026. On March 19, 2026, District Judge Kenneth D. Bell consolidated it with Black v. Connect Holding II LLC, No. 3:26-cv-00027 (filed January 13), and Riggs v. Connect Holding II LLC, No. 3:26-cv-00067 (filed January 23), “for all purposes.” Magistrate Judge W. Carleton Metcalf handles referred motions.
Three other suits in the same court ended separately: Smith, No. 3:26-cv-00032 (voluntary dismissal April 1, 2026), Frye, No. 3:26-cv-00099 (stipulation of dismissal April 10, 2026) and Arter, No. 3:26-cv-00045 (voluntary dismissal June 30, 2026). Top Class Actions also reported suits in Ohio, Virginia and Texas federal courts; we could not confirm those on a docket.
Status: Settlement Notice, Then Dismissals — No Class Payout
The documents themselves are not public, so the terms are unknown. What we can say: no class was certified, no class settlement was filed for court approval, and no administrator, settlement website, claim form or deadline exists. When individual plaintiffs settle before certification, the other customers usually receive nothing — and also give up nothing.
Who Was in the Proposed Classes
The complaints proposed classes of Brightspeed customers whose information was allegedly taken, with some suits seeking state classes for North Carolina, Ohio, Virginia and Texas. No class was ever certified, so no one is a class member today.
The practical test is your own account. If you were a Brightspeed residential customer in January 2026, the claimed data set may include you. As of January 19, 2026, Brightspeed had not posted a public notice confirming customer data exposure, and we have found no individual notice letter. If one arrives, keep it — it states what was involved.
Is Any Money Coming?
Because the dismissals came before any class was certified, your own right to bring a claim is generally not affected by them. If you suffered a documented loss you trace to this incident, that is a question for a licensed attorney, not a claim form.
How cases like this one end
Our copy of the federal courts’ own case database covers 16,001 other personal property damage casesclosed in U.S. federal district courts between 2015 and 2026, 11.3% of them filed as class actions:
- 32.5% ended in a settlement recorded by the court. Another 19.5% were dismissed voluntarily, which often follows a private settlement — so the real settlement share sits between 32.5% and 52.1%.
- 5.9% were decided on a motion before any trial.
- 1 in 90 reached a trial (1.1%), after a median of 27.5 months.
- Median time from filing to the end of the case: 8.4 months.
- Only 250 of them (1.6%) record a money award at all; the median of those is $443,000.
These are base rates for this type of case (other Personal Property Damage) — not a prediction about this lawsuit, and not legal advice. Source: Federal Judicial Center, Integrated Database (civil), analysed by Settlement Insight. Cases heard in state courts are not included.
Brightspeed Breach Timeline
January 4, 2026 — The Extortion Claim
Crimson Collective posts on Telegram that it holds data on more than 1 million residential customers. Brightspeed says it is investigating a cybersecurity event.
January 7, 2026 — First Federal Suit
Polner v. Connect Holding LLC, No. 3:26-cv-00014, is filed in the Western District of North Carolina. Several more follow within weeks.
March 19, 2026 — Three Cases Consolidated
Judge Kenneth D. Bell merges Polner, Black and Riggs for all purposes and orders a consolidated complaint within 14 days.
April 2026 — Complaint and Motion to Dismiss
The consolidated complaint is filed April 2. Brightspeed moves to dismiss on April 23.
June 3, 2026 — Settlement Notice and Stay
A case settlement notice and an order on a motion to stay appear on the docket. No class settlement is filed.
June 24 and 30, 2026 — Voluntary Dismissals
Notices of voluntary dismissal are filed. As of October 19, 2026, no later docket entries are visible and no claim process exists.
Three Things to Watch For
The claimed data set is built for phishing — it pairs your name and address with your account and payment details:
“Brightspeed settlement claim” sites
There is no Brightspeed class settlement and no claims portal. A page asking for your Social Security number or bank login to “release your payment” is collecting data, not filing a claim.
Calls quoting your account and last 4 card digits
The attackers claim to hold account numbers, payment history and masked card numbers. A caller who knows those details can sound like Brightspeed billing. Hang up and call the number on your bill.
“Your service will be disconnected” messages
The group publicly boasted about cutting customers off, which makes fake disconnection and past-due notices believable. Check your balance by logging in directly, never through a link in a text or email.
Brightspeed Lawsuit — Questions People Actually Ask
Short answers to the questions people ask most about this case.
Is there a Brightspeed data breach settlement or claim form?
No. As of October 19, 2026, there is no class settlement, no fund, no administrator, no claim form and no deadline. The court file shows a settlement notice on June 3, 2026 followed by voluntary dismissals, but no class settlement was ever filed for approval.
What happened in the Brightspeed data breach?
On January 4, 2026, the Crimson Collective extortion group claimed on Telegram that it had stolen personal data on more than 1 million residential customers, including contact details, account records, payment history and masked card numbers. Those are the group's claims. Brightspeed said it was investigating a cybersecurity event.
Did Brightspeed confirm the breach?
Not publicly. As of January 19, 2026, the company said it had not confirmed a data breach and had posted no public notice confirming customer data exposure. We have found no later public confirmation or notice letter.
Do I get compensation for a data breach?
Only if a case produces a settlement or judgment that covers you. For the Brightspeed data breach, none exists: the docket shows voluntary dismissals in June 2026 and no class settlement. In data breach cases that do settle, payments come through a court-appointed administrator and a claim form — see our data breach settlement calculator for how those usually work.
What if my SSN was part of a data breach?
Social Security numbers are not among the data types Crimson Collective listed for Brightspeed. If your SSN was exposed in a different breach, freeze your credit at all three bureaus — free and reversible — and watch for new accounts you did not open.
How can I check if I have been data breached?
For this incident there is no official lookup tool, because Brightspeed has not published a notice confirming whose data was involved. If you were a residential customer in January 2026, assume your contact and account details could be circulating, and treat unexpected calls or texts about your account with suspicion.
What company owns Brightspeed?
Brightspeed was formed when private equity firm Apollo Global Management bought assets of Lumen Technologies, according to The Charlotte Observer. It is privately held, headquartered in Charlotte, and serves more than 7.3 million homes and businesses.
What is worth doing right now?
Change your Brightspeed account password and turn on two-factor authentication where available. Watch card statements for charges you did not make. Do not give account or card details to anyone who contacts you first — call the number on your bill instead.
About This Information
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology. Reviewed by Leonard Goldberg, Editor · Last updated - $236 billion in real payouts analyzed · See what we found
This page is for general information only and is not legal advice. Lawsuit status, eligibility, and compensation can change. Settlement Insight is not a law firm and does not represent any party. Consult a licensed attorney about your specific situation.
Related Consumer Brand Lawsuits
Other cases and free tools — not about this case.
Similar cases we track
- Data Breach Settlement CalculatorEstimate what a breach settlement could pay if one is ever reached
- Open Class Action SettlementsSettlements that are taking claims right now, with deadlines
- AT&T Data Breach SettlementAnother telecom customer-data case, and what it actually paid
- Comcast Xfinity Data Breach SettlementAn internet provider breach that did reach a class settlement