| Breach | Domain | Accounts | Date | Data exposed |
|---|---|---|---|---|
| Assurance Retraite In September 2024, the French national pension fund Assurance Retraite suffered a data breach affecting approximately 370k assistance beneficiaries . The data included 70k unique email addresses… | lassuranceretraite.fr | 70,372 | 2024-09-01 | Dates of birth, Email addresses, Family members' names, Government issued IDs, Income levels, Marital statuses |
| Gîtes de France In May 2026, the French holiday rental network Gîtes de France suffered a data breach affecting some of its departmental branches. The incident exposed hundreds of thousands of customer records,… | gites-de-france.com | 117,574 | 2026-05-16 | Booking details, Email addresses, Names, Phone numbers, Physical addresses |
| Crunchbase In January 2026, the private company intelligence platform Crunchbase was targeted in a ShinyHunters "pay or leak" extortion attempt . Data allegedly obtained from the company was subsequently… | crunchbase.com | 559,908 | 2026-01-22 | Email addresses, Employers, Job titles, Names, Phone numbers, Physical addresses |
| Sharecare In August 2026, the digital health company Sharecare was the target of a ShinyHunters "pay or leak" extortion campaign . The group subsequently published data it claimed was taken from Sharecare's… | sharecare.com | 318,185 | 2026-08-12 | Dates of birth, Email addresses, Employers, Genders, Government issued IDs, Job titles |
| Neogen In August 2026, the food and animal safety organisation Neogen was the target of a ShinyHunters "pay or leak" extortion attempt . The group later published data it claimed had been obtained from… | neogen.com | 435,963 | 2026-08-29 | Email addresses, Employers, Job titles, Names, Phone numbers, Physical addresses |
| CyrusOne In August 2026, data centre operator CyrusOne was the target of a ShinyHunters "pay or leak" extortion attempt . The group subsequently published data allegedly obtained from the company, which… | cyrusone.com | 373,460 | 2026-08-05 | Email addresses, Employers, Job titles, Names, Phone numbers, Physical addresses |
| Double Counter In October 2026, the Discord server protection service Double Counter suffered a data breach attributed to a vulnerability in the Metabase analytics tool . In its disclosure notice, Double Counter… | doublecounter.gg | 274,922 | 2026-10-04 | Email addresses, Geographic locations, Names, Usernames |
| Angel One In July 2024, the Indian stock brokerage firm Angel One confirmed that data leaked online related to a breach that occurred in April 2023 . The leaked data included 7.9M user records containing 6.8M… | angelone.in | 6,765,054 | 2023-04-01 | Bank account numbers, Dates of birth, Email addresses, Financial investments, Government issued IDs, Names |
| Medela In September 2026, Swiss medical device company Medela was the target of a ShinyHunters "pay or leak" extortion campaign . The data allegedly obtained in the breach was later published publicly and… | medela.com | 423,947 | 2026-09-07 | Email addresses, Employers, Job titles, Names, Phone numbers, Physical addresses |
| LimeLeads In 2019, the now-defunct B2B marketing leads database service LimeLeads suffered a data breach due to an exposed, unsecured Elasticsearch server. The incident exposed tens of millions of records of… | limeleads.com | 17,838,396 | 2019-08-01 | Email addresses, Employers, Geographic locations, Job titles, Phone numbers |
| Burger King Russia In October 2024, news of a data breach exposing Burger King Russia customers broke following an August attack on the Mindbox marketing automation platform. The breach exposed 3.2M unique email… | burgerkingrus.ru | 3,155,792 | 2024-08-25 | Dates of birth, Email addresses, Genders, Geographic locations, Names, Phone numbers |
| Chess.com (2026) In August 2026, millions of records allegedly sourced from Chess.com were posted online . The data contained 7.3M rows with 4.6M unique email addresses, along with usernames, names, countries and… | chess.com | 4,653,212 | 2026-08-03 | Email addresses, Geographic locations, Names, Usernames |
| McKesson In August 2026, healthcare and pharmaceutical company McKesson was targeted in a ShinyHunters "pay or leak" extortion campaign . The group subsequently published a substantial corpus of data they… | mckesson.com | 6,404,340 | 2026-08-21 | Dates of birth, Email addresses, Employers, Genders, Names, Personal health data |
| Manchester Airports Group In August 2026, Manchester Airports Group (MAG) disclosed a data breach impacting their services . The incident was later claimed by the FulcrumSec hacking group , who subsequently published email… | magairports.com | 8,849,657 | 2026-08-27 | Browser user agent details, Email addresses, Geographic locations, IP addresses, Names, Phone numbers |
| Questel In August 2026, the French intellectual property software and services company Questel was the target of a ShinyHunters "pay or leak" extortion campaign . The group subsequently published an… | questel.com | 1,226,209 | 2026-08-01 | Email addresses, Employers, Job titles, Names, Phone numbers, Physical addresses |
| Carhartt In August 2026, clothing retailer Carhartt was the target of a ShinyHunters "pay or leak" extortion campaign . The group subsequently published data allegedly obtained from the company including… | carhartt.com | 12,933,413 | 2026-08-13 | Email addresses, Names, Phone numbers, Physical addresses |
| NIUS In July 2025, the German news service NIUS suffered a data breach which was subsequently leaked publicly . The data included 6k unique email addresses along with names, physical addresses and payment… | nius.de | 6,090 | 2025-07-13 | Bank account numbers, Email addresses, Names, Partial credit card data, Physical addresses, Purchases |
| Golf Canada In mid-2026, hundreds of thousands of user records allegedly sourced from Golf Canada began circulating via Telegram. The data included 569k unique email addresses along with names, usernames, dates… | golfcanada.ca | 568,972 | 2026-05-14 | Dates of birth, Email addresses, Genders, Geographic locations, Names, Usernames |
| Oz Hair and Beauty In August 2026, Australian beauty retailer Oz Hair and Beauty was the target of an xpl0itrs extortion attack . The group subsequently published data allegedly obtained from the company, which… | ozhairandbeauty.com | 1,988,331 | 2026-08-15 | Email addresses, Geographic locations, Names, Phone numbers, Purchases |
| Fanlore In August 2026, the Organization for Transformative Works (OTW) identified unauthorised access to the Fanlore wiki it operates . The breach resulted in the exposure of 145k unique email addresses… | fanlore.org | 144,520 | 2026-08-06 | Email addresses, Names, Passwords, Usernames |
| RingCentral In July 2026, the cloud-based business communications platform RingCentral was the target of a ShinyHunters "pay or leak" extortion campaign . The group subsequently published data they claimed was… | ringcentral.com | 1,596,490 | 2026-07-27 | Email addresses, Names, Phone numbers, Physical addresses |
| Alcon In August 2026, the Alcon eye care company was named in a ShinyHunters "pay or leak" extortion campaign . The group subsequently published data allegedly sourced from Alcon containing 218k unique… | alcon.com | 218,395 | 2026-08-01 | Email addresses, Names, Phone numbers, Physical addresses |
| Brinks Home In July 2026, Brinks Home was targeted in a ShinyHunters "pay or leak" extortion campaign . The group subsequently published data they alleged was taken from the company, including 732k unique email… | brinkshome.com | 732,162 | 2026-07-13 | Dates of birth, Email addresses, Names, Partial credit card data, Phone numbers, Physical addresses |
| Exact Sciences In July 2026, Exact Sciences (now owned by Abbott Laboratories) was the target of a ShinyHunters "pay or leak" extortion campaign . The group claimed to have obtained data from the company's cancer… | exactsciences.com | 10,869,543 | 2026-07-15 | Dates of birth, Email addresses, Genders, Names, Personal health data, Phone numbers |
| Inter-Con Security In June 2026, Inter-Con Security was targeted in a ShinyHunters “pay or leak” extortion campaign . The group subsequently published data it alleged was taken from the company, including 276k unique… | icsecurity.com | 276,114 | 2026-06-18 | Email addresses, Employers, Job titles, Names, Phone numbers, Physical addresses |
| SplitVPN In July 2026, the Russian VPN service SplitVPN (previously known as NotVPN) suffered a data breach . The incident exposed millions of customer records, including 865k unique email addresses. Other… | splitvpn.io | 865,336 | 2026-07-21 | Device information, Email addresses, Geographic locations, IP addresses, Partial credit card data |
| Houston City College In June 2026, Houston City College was the target of a ShinyHunters "pay or leak" extortion campaign . Data allegedly obtained from the college was later published publicly and included 832k unique… | hccs.edu | 831,642 | 2026-06-16 | Academic records, Citizenship statuses, Dates of birth, Email addresses, Genders, Names |
| Suno In November 2025, AI music generation tool Suno suffered a data breach that later came to light in July the following year . The data contained over 55M unique email addresses. Phone numbers were… | suno.com | 55,282,226 | 2025-11-25 | Email addresses, Names, Partial credit card data, Phone numbers, Physical addresses, Purchases |
| Paidwork In March 2026, hackers claimed they had obtained data from the gig economy platform Paidwork which they then listed for sale . Almost 11GB of data allegedly obtained from the platform was… | paidwork.com | 23,272,765 | 2026-03-29 | Bank account numbers, Dates of birth, Device information, Education levels, Email addresses, Financial transactions |
| Fluke In July 2026, electronic test and measurement equipment company Fluke was targeted in a ShinyHunters "pay or leak" extortion campaign . The group subsequently published more than 100GB of data… | fluke.com | 821,100 | 2026-07-01 | Email addresses, Employers, Job titles, Names, Physical addresses, Support tickets |
| Goose Creek In June 2026, a party claiming to have access to data from Goose Creek Candle Company sent emails to a number of the company's customers , claiming the company had a security vulnerability and… | goosecreek.com | 6,574,121 | 2026-06-09 | Email addresses, Names, Phone numbers, Physical addresses, Purchases |
| Glendale Community College In June 2026, Glendale Community College was the target of a ShinyHunters "pay or leak" extortion campaign . Data allegedly obtained from Glendale was later published online and included almost 800k… | glendale.edu | 793,925 | 2026-06-15 | Academic records, Dates of birth, Email addresses, Genders, Government issued IDs, Names |
| Moody Bible Institute In June 2026, Moody Bible Institute was targeted by a ShinyHunters "pay or leak" extortion campaign . Over 2.3M unique email addresses and other personal data were later published publicly, including… | moody.edu | 2,303,416 | 2026-06-15 | Dates of birth, Email addresses, Genders, Marital statuses, Names, Phone numbers |
| Sysco In June 2026, the food distribution company Sysco was targeted by a ShinyHunters "pay or leak" extortion campaign . Data was subsequently published containing 2.7M unique email addresses belonging to… | sysco.com | 2,691,852 | 2026-06-15 | Customer feedback, Email addresses, Employers, Job titles, Names, Phone numbers |
| American Tower In June 2026, telecommunications tower infrastructure company American Tower was the target of a ShinyHunters "pay or leak" extortion campaign . The group subsequently published data allegedly taken… | americantower.com | 216,601 | 2026-06-12 | Email addresses, Job titles, Names, Phone numbers, Physical addresses |
| Madison Square Garden Sports In June 2026, the sports and entertainment company Madison Square Garden Sports was the target of a ShinyHunters "pay or leak" extortion campaign . The group later published the alleged data, which… | msgsports.com | 9,796,738 | 2026-06-05 | Customer service records, Email addresses, Names, Phone numbers, Physical addresses |
| JCPenney In June 2026, retailer JCPenney and associated brands were targeted in a ShinyHunters "pay or leak" extortion campaign . Data allegedly obtained from JCPenney through the exploitation of a critical… | jcpenny.com | 368,418 | 2026-06-12 | Dates of birth, Email addresses, Government issued IDs, Job titles, Names, Phone numbers |
| Ralph Lauren In June 2026, fashion retailer Ralph Lauren was targeted in a ShinyHunters "pay or leak" extortion campaign . The group subsequently published hundreds of gigabytes of data they claimed was obtained… | ralphlauren.com | 139,903 | 2026-06-11 | Age groups, Email addresses, Genders, Names, Phone numbers |
| Operation Endgame 4.0 On 18 June 2026, the latest phase of Operation Endgame targeted the SocGholish malware operation , a prolific malware distribution network used to compromise systems and facilitate further… | 4,348,526 | 2026-06-18 | Email addresses, Passwords | |
| CFGI In March 2026, the financial consulting and advisory firm CFGI was the target of a ShinyHunters "pay-or-leak" extortion campaign . The group subsequently publicised data allegedly obtained from CFGI… | cfgi.com | 248,235 | 2026-03-06 | Email addresses, Employers, Job titles, Names, Phone numbers, Physical addresses |
| June 2026 Stealer Logs In June 2026, a collection of accumulated stealer logs from various sources was added to HIBP. The corpus comprised 56M unique email addresses across hundreds of millions of stealer log records. The… | 56,278,397 | 2026-06-15 | Email addresses, Passwords | |
| Berkadia In March 2026, the commercial real estate finance company Berkadia was the target of a ShinyHunters "pay or leak" extortion campaign . The group subsequently published data they alleged was taken… | berkadia.com | 305,216 | 2026-03-19 | Email addresses, Employers, Names, Phone numbers, Physical addresses |
| Infinite Campus In March 2026, the student information system Infinite Campus was targeted in a ShinyHunters "pay or leak" extortion campaign . The group subsequently published data they alleged was taken from… | infinitecampus.com | 137,123 | 2026-03-18 | Email addresses, Employers, Job titles, Names, Phone numbers, Physical addresses |
| University of Nottingham In June 2026, the University of Nottingham was the target of a cyber attack , later linked to a ShinyHunters "pay or leak" extortion campaign. Tens of gigabytes of data were subsequently published… | nottingham.ac.uk | 454,635 | 2026-06-09 | Academic records, Citizenship statuses, Dates of birth, Disabilities, Email addresses, Ethnicities |
| Baker Distributing In May 2026, the HVAC/R wholesale distributor Baker Distributing Company was added to the ShinyHunters data extortion group's "pay or leak" site . In early June, the group publicly published data… | bakerdist.com | 102,935 | 2026-05-23 | Email addresses, Names, Phone numbers, Physical addresses, Support tickets |
| BCD Travel In May 2026, the corporate travel management company BCD Travel was claimed as a victim of the ShinyHunters "pay or leak" extortion campaign . Data allegedly obtained from BCD was subsequently… | bcdtravel.com | 396,313 | 2026-05-29 | Email addresses, Employers, Job titles, Names, Phone numbers, Physical addresses |
| DentaQuest In May 2026, the dental benefits administrator DentaQuest was the target of a ShinyHunters "pay or leak" extortion campaign that resulted in the group publicly publishing hundreds of gigabytes of… | dentaquest.com | 2,553,599 | 2026-05-23 | Dates of birth, Email addresses, Genders, Government issued IDs, Health insurance information, Names |
| Edmunds In January 2026, the automotive research and car-shopping platform Edmunds was listed by the ShinyHunters hacking group as having been breached . Data purportedly obtained in the incident was later… | edmunds.com | 177,860 | 2026-01-24 | Device information, Email addresses, IP addresses, Passwords, Phone numbers, Usernames |
| Atlas Menu In May 2026, the GTA V and CS2 cheat service Atlas Menu suffered a data breach. An attacker claimed to have gained access to all Atlas systems and published the service's database to a public GitHub… | atlasmenu.net | 63,926 | 2026-05-30 | Email addresses, IP addresses, Passwords, Support tickets, Usernames |
| Charter In May 2026, the telecommunications company Charter Communications (the parent company behind the consumer broadband and cable brand Spectrum) was named by the ShinyHunters group in a "pay or leak"… | charter.com | 4,851,517 | 2026-05-23 | Email addresses, Job titles, Names, Phone numbers, Physical addresses |