Loading page…
Crunchbase confirmed a data breach in January 2026 in which a threat actor exfiltrated data on approximately 560,000 individuals, including names, email addresses, phone numbers, and job-related information.
According to HIBP, Crunchbase was targeted in January 2026 by a ShinyHunters extortion attempt. The threat actor threatened to publish stolen data unless paid. Crunchbase later confirmed that a threat actor had exfiltrated documents from its corporate network, as reported by SecurityWeek.
The published data included roughly 560,000 unique email addresses. According to HIBP, other exposed information included names, physical addresses, phone numbers, job titles, employers, and LinkedIn profile links. The records largely belonged to leads and business contacts.
Approximately 560,000 individuals are affected, primarily business professionals and leads whose contact and employment information was stored in Crunchbase's platform.
If you have a Crunchbase account or believe your business contact information may be in their database, monitor for unsolicited outreach or phishing attempts targeting your professional identity. Be cautious of emails or calls referencing your employer or job title, as attackers may use this data for targeted phishing. Consider reviewing your LinkedIn privacy settings and be alert to any suspicious connection requests.