Loading page…
Crunchbase confirmed a data breach in January 2026 in which a threat actor exfiltrated data on approximately 560,000 individuals, including names, email addresses, phone numbers, and job-related information.
Sharecare, a digital health company, had data on approximately 318,000 accounts published by the ShinyHunters group following an extortion campaign in August 2026.
Neogen, a food and animal safety organization, had data on approximately 436,000 individuals published by the ShinyHunters group following an extortion attempt in August 2026.
Data centre operator CyrusOne had data on approximately 373,000 accounts published by the ShinyHunters group following an extortion attempt in August 2026.
Questel, a French intellectual property software and services company, had data on approximately 1.2 million accounts published by the ShinyHunters group following an extortion campaign in August 2026.
LimeLeads, a now-defunct B2B marketing leads service, exposed approximately 17.8 million unique email addresses and related corporate contact data in 2019 due to an unsecured Elasticsearch server.
Inter-Con Security had data on approximately 276,000 individuals published by the ShinyHunters group following an extortion campaign in June 2026.
Fluke Corporation had data on over 821,000 accounts exposed after the ShinyHunters group published more than 100GB of allegedly stolen data in July 2026.
Sysco, a food distribution company, had data on approximately 2.7 million staff and customers exposed after a ShinyHunters extortion campaign resulted in the publication of corporate contact information.
CFGI, a financial consulting and advisory firm, had data on approximately 248,000 individuals exposed after the ShinyHunters group conducted an extortion campaign and subsequently published corporate contact information.
Infinite Campus, a student information system, had data on approximately 137,000 accounts stolen and published by the ShinyHunters group in March 2026 following an extortion campaign.
Berkadia, a commercial real estate finance company, had data from its Salesforce instance published by the ShinyHunters group in March 2026, exposing over 300,000 individuals' contact and employer information.
BCD Travel, a corporate travel management company, had data on approximately 396,000 individuals exposed after ShinyHunters claimed the company as a victim of an extortion campaign and published the data publicly in early June 2026.
Ameriprise Financial had data from approximately 500,000 accounts exposed after the ShinyHunters group exfiltrated over 200GB from its Salesforce and SharePoint systems and published it following failed extortion negotiations.
Abrigo, a fintech software company, had data from its Salesforce instance published by the ShinyHunters group in April 2026, exposing business contact information for over 711,000 individuals.
Marcus & Millichap, a commercial real estate brokerage, had data on approximately 1.8 million individuals exposed after being named as an alleged victim of the ShinyHunters hacking group in April 2026.
Udemy suffered a data breach affecting 1.4 million accounts, with customer and instructor information including email addresses, names, addresses, phone numbers, and payment methods exposed.