U.S. telecommunications companies: FCC urges telecoms to boost cybersecurity amid growing ransomware threat

FCC Warns Telecom Firms of Surging Ransomware Threats, Urges Stronger Defenses

The Federal Communications Commission (FCC) issued a January 29 alert warning U.S. telecommunications companies about escalating ransomware risks, citing a fourfold global increase in attacks on telecom firms between 2022 and 2025. The FCC’s Public Safety and Homeland Security Bureau highlighted recent incidents targeting small-to-medium-sized providers, which disrupted services, exposed sensitive data, and locked companies out of critical systems.

The alert outlines best practices to mitigate threats, including regular patching, multifactor authentication (MFA), network segmentation, and supply-chain vulnerability monitoring. It also provides incident response guidance, urging companies to report attacks to the FCC, FBI, and other agencies. Additional recommendations include data backups, employee training, and testing response plans, along with enforcing strong passwords, least-privilege access, and software patch validation.

The FCC’s warning follows growing concerns over state-sponsored cyber threats, including China’s Salt Typhoon campaign, which breached multiple U.S. and foreign telecom firms in 2024. Security experts note that outdated, poorly maintained systems in the sector make full protection difficult. Meanwhile, Sen. Ron Wyden (D-Ore.) has pressured agencies to hold telecoms accountable, blocking a CISA nominee until a 2022 report on telecom vulnerabilities is released and advocating for stricter cybersecurity mandates. In contrast, the Trump administration reversed a Biden-era policy in November that would have expanded telecoms’ cybersecurity obligations.

Source: https://www.cybersecuritydive.com/news/fcc-telecommunications-ransomware-warning/811100/

Comtech Telecommunications Corp. cybersecurity rating report: https://www.rankiteo.com/company/comtech-telecommunications-corp

"id": "COM1770058485",
"linkid": "comtech-telecommunications-corp",
"type": "Ransomware",
"date": "1/2026",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'industry': 'Telecommunications',
                        'location': 'U.S.',
                        'size': 'Small-to-medium-sized',
                        'type': 'Telecommunications companies'}],
 'data_breach': {'type_of_data_compromised': 'Sensitive data'},
 'date_publicly_disclosed': '2024-01-29',
 'description': 'The Federal Communications Commission (FCC) issued an alert '
                'warning U.S. telecommunications companies about escalating '
                'ransomware risks, citing a fourfold global increase in '
                'attacks on telecom firms between 2022 and 2025. The alert '
                'highlights recent incidents targeting small-to-medium-sized '
                'providers, disrupting services, exposing sensitive data, and '
                'locking companies out of critical systems.',
 'impact': {'data_compromised': 'Sensitive data exposed',
            'downtime': 'Service disruptions',
            'operational_impact': 'Disrupted services',
            'systems_affected': 'Critical systems locked'},
 'motivation': ['Financial gain', 'Espionage'],
 'post_incident_analysis': {'root_causes': ['Outdated systems',
                                            'Poorly maintained systems',
                                            'Supply-chain vulnerabilities']},
 'ransomware': {'data_encryption': 'Critical systems locked'},
 'recommendations': ['Regular patching',
                     'Multifactor authentication (MFA)',
                     'Network segmentation',
                     'Supply-chain vulnerability monitoring',
                     'Data backups',
                     'Employee training',
                     'Testing response plans',
                     'Strong passwords',
                     'Least-privilege access',
                     'Software patch validation'],
 'references': [{'source': 'FCC Public Safety and Homeland Security Bureau'}],
 'regulatory_compliance': {'regulatory_notifications': ['FCC alert']},
 'response': {'law_enforcement_notified': ['FCC', 'FBI'],
              'network_segmentation': 'Recommended',
              'recovery_measures': ['Data backups',
                                    'Employee training',
                                    'Testing response plans'],
              'remediation_measures': ['Regular patching',
                                       'Multifactor authentication (MFA)',
                                       'Network segmentation',
                                       'Supply-chain vulnerability '
                                       'monitoring']},
 'stakeholder_advisories': 'FCC alert urging stronger defenses and incident '
                           'reporting',
 'threat_actor': ['State-sponsored actors', 'China’s Salt Typhoon campaign'],
 'title': 'FCC Warns Telecom Firms of Surging Ransomware Threats',
 'type': 'Ransomware',
 'vulnerability_exploited': ['Outdated systems',
                             'Poorly maintained systems',
                             'Supply-chain vulnerabilities']}