Strauss Borrelli PLLC, a leading data breach law firm, is investigating CenturyLink Communications, LLC, which does business as Lumen Technologies (“Lumen”) regarding its recent data breach. The Lumen data breach may have involved sensitive personal information belonging to an undetermined number of individuals.
ABOUT CENTURYLINK COMMUNICATIONS, LLC D/B/A LUMEN TECHNOLOGIES:
CenturyLink is a telecommunications company that offers high-speed internet over fiber-optic and DSL networks, plus digital voice landline phone, and TV services for residential and small business customers.2 Today, CenturyLink is a part of Lumen, a global communications service provider offering networking, edge cloud, collaboration, cybersecurity solutions, and managed services.3 Headquartered in Monroe, Louisiana, Lumen employs over 10,000 individuals.
WHAT HAPPENED?
Recently, Lumen reported to the Attorney General of Montana that the sensitive personal identifiable information in its care may have been accessed. According to the breach notice, on January 17, 2025, Lumen discovered an issue that exposed customer sensitive information.1 As a result, Lumen launched an investigation to determine the nature of the incident.
Through its investigation, Lumen confirmed that sensitive personal information in certain files in its network may have been compromised by an unauthorized third party between November 15, 2024, and December 4, 2024. As a result, Lumen began a review of the data to determine what information had been impacted as well as identify the specific individuals affected. On February 5, 2025, Lumen completed this review. The exact type of personal information potentially exposed has not been made publicly available by Lumen. However, according to state reporting guidelines, “personal information” can include the following types of information:
- Name
- Social Security number
- Driver’s license number, state identification number, or tribal identification number
- Account number or credit or debit card number, in combination with any required security code, access code, or password that would permit access to an individual’s financial account
- Medical record information
- Taxpayer identification number
- An identity protection personal identification number issued by the United States internal revenue service
On March 6, 2025, Lumen began mailing data breach notification letters to impacted individuals. Based on the breach notices provided to Montana residents, Lumen is providing affected individuals with a list of the information impacted and 24 months of complimentary credit monitoring services. A link to the form breach notification letter that Lumen filed with the Attorney General of Montana is below.
If you received a breach notification letter from CenturyLink Communications, LLC d/b/a Lumen Technologies:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.
