Windstream Holdings Details

Windstream Holdings

Little Rock, Arkansas • employees • Telecommunications

Industry

Telecommunications

Security Incidents

Windstream Holdings, Inc., also doing business as Windstream Communications or Windstream, is a provider of voice and data network communications, and managed services, to businesses in the United States.

Security Incidents

Windstream Holdings Breach of Oct 2023

Severity Score

Significant

Type

Unknown

Summary

The Windstream Holdings security incident of October 2023, known as the "Pumpkin Eclipse," was a cyberattack that disabled over 600,000 internet routers across several Midwest states between October 25th and 27th. This significant disruption affected routers supplied by Windstream, a major American internet service provider, across 18 states. The incident was attributed to a malware botnet named 'Pumpkin Eclipse,' which caused widespread damage to office/home office (SOHO) internet infrastructure. Despite the impact, Windstream has yet to provide a detailed explanation for the attack, leaving ...
Show more

Severity

The breach was severe as it resulted in the disabling of over 600,000 internet routers supplied by Windstream across several Midwest states within a 72-hour period in October 2023. Security researchers from Black Lotus Labs at Lumen Technologies highlighted the highly unusual nature of the incident, indicating a significant impact on the affected routers.

Impact

The breach impacted a large number of users and businesses relying on Windstream's internet services, leading to widespread disruptions in connectivity across 18 states. The incident caused significant inconvenience and potential financial losses for those affected by the disabled routers.