{"generated":1792412924168,"hibp":[{"n":"Gîtes de France","dom":"gites-de-france.com","bd":"2026-05-16","ad":1792299013000,"c":117574,"dc":["Booking details","Email addresses","Names","Phone numbers","Physical addresses"],"v":1,"x":"In May 2026, the French holiday rental network Gîtes de France suffered a data breach affecting some of its departmental branches. The incident exposed hundreds of thousands of customer records, including 118k unique email addresses alongside names, phone numb"},{"n":"Crunchbase","dom":"crunchbase.com","bd":"2026-01-22","ad":1791957686000,"c":559908,"dc":["Email addresses","Employers","Job titles","Names","Phone numbers","Physical addresses"],"v":1,"x":"In January 2026, the private company intelligence platform Crunchbase was targeted in a ShinyHunters \"pay or leak\" extortion attempt. Data allegedly obtained from the company was subsequently published publicly and included 560k unique email addresses, largely"},{"n":"Sharecare","dom":"sharecare.com","bd":"2026-08-12","ad":1791847712000,"c":318185,"dc":["Dates of birth","Email addresses","Employers","Genders","Government issued IDs","Job titles"],"v":1,"x":"In August 2026, the digital health company Sharecare was the target of a ShinyHunters \"pay or leak\" extortion campaign. The group subsequently published data it claimed was taken from Sharecare's systems, containing 318k unique email addresses. Most of the dat"},{"n":"Neogen","dom":"neogen.com","bd":"2026-08-29","ad":1791529585000,"c":435963,"dc":["Email addresses","Employers","Job titles","Names","Phone numbers","Physical addresses"],"v":1,"x":"In August 2026, the food and animal safety organisation Neogen was the target of a ShinyHunters \"pay or leak\" extortion attempt. The group later published data it claimed had been obtained from Neogen. The data consisted largely of corporate contact records an"},{"n":"CyrusOne","dom":"cyrusone.com","bd":"2026-08-05","ad":1791415156000,"c":373460,"dc":["Email addresses","Employers","Job titles","Names","Phone numbers","Physical addresses"],"v":1,"x":"In August 2026, data centre operator CyrusOne was the target of a ShinyHunters \"pay or leak\" extortion attempt. The group subsequently published data allegedly obtained from the company, which included 373k unique email addresses across records relating to use"},{"n":"Double Counter","dom":"doublecounter.gg","bd":"2026-10-04","ad":1791351744000,"c":274922,"dc":["Email addresses","Geographic locations","Names","Usernames"],"v":1,"x":"In October 2026, the Discord server protection service Double Counter suffered a data breach attributed to a vulnerability in the Metabase analytics tool. In its disclosure notice, Double Counter advised that attackers gained access to a subset of its data. A "},{"n":"Angel One","dom":"angelone.in","bd":"2023-04-01","ad":1791344731000,"c":6765054,"dc":["Bank account numbers","Dates of birth","Email addresses","Financial investments","Government issued IDs","Names"],"v":1,"x":"In July 2024, the Indian stock brokerage firm Angel One confirmed that data leaked online related to a breach that occurred in April 2023. The leaked data included 7.9M user records containing 6.8M unique email addresses, along with names, physical addresses, "},{"n":"Medela","dom":"medela.com","bd":"2026-09-07","ad":1790768908000,"c":423947,"dc":["Email addresses","Employers","Job titles","Names","Phone numbers","Physical addresses"],"v":1,"x":"In September 2026, Swiss medical device company Medela was the target of a ShinyHunters \"pay or leak\" extortion campaign. The data allegedly obtained in the breach was later published publicly and included 424k unique email addresses belonging predominantly to"},{"n":"LimeLeads","dom":"limeleads.com","bd":"2019-08-01","ad":1790064157000,"c":17838396,"dc":["Email addresses","Employers","Geographic locations","Job titles","Phone numbers"],"v":1,"x":"In 2019, the now-defunct B2B marketing leads database service LimeLeads suffered a data breach due to an exposed, unsecured Elasticsearch server. The incident exposed tens of millions of records of largely corporate contact data containing 17.8M unique email a"},{"n":"Burger King Russia","dom":"burgerkingrus.ru","bd":"2024-08-25","ad":1789998840000,"c":3155792,"dc":["Dates of birth","Email addresses","Genders","Geographic locations","Names","Phone numbers"],"v":1,"x":"In October 2024, news of a data breach exposing Burger King Russia customers broke following an August attack on the Mindbox marketing automation platform. The breach exposed 3.2M unique email addresses along with names, genders, dates of birth, phone numbers "},{"n":"Chess.com (2026)","dom":"chess.com","bd":"2026-08-03","ad":1789304951000,"c":4653212,"dc":["Email addresses","Geographic locations","Names","Usernames"],"v":1,"x":"In August 2026, millions of records allegedly sourced from Chess.com were posted online. The data contained 7.3M rows with 4.6M unique email addresses, along with usernames, names, countries and data relating to users' Chess.com accounts. Analysis of the data "},{"n":"McKesson","dom":"mckesson.com","bd":"2026-08-21","ad":1789019139000,"c":6404340,"dc":["Dates of birth","Email addresses","Employers","Genders","Names","Personal health data"],"v":1,"x":"In August 2026, healthcare and pharmaceutical company McKesson was targeted in a ShinyHunters \"pay or leak\" extortion campaign. The group subsequently published a substantial corpus of data they alleged was sourced from the company, which included 6.4M unique "},{"n":"Manchester Airports Group","dom":"magairports.com","bd":"2026-08-27","ad":1788334619000,"c":8849657,"dc":["Browser user agent details","Email addresses","Geographic locations","IP addresses","Names","Phone numbers"],"v":1,"x":"In August 2026, Manchester Airports Group (MAG) disclosed a data breach impacting their services. The incident was later claimed by the FulcrumSec hacking group, who subsequently published email addresses and phone numbers relating to 8.8M customers of Manches"},{"n":"Questel","dom":"questel.com","bd":"2026-08-01","ad":1788238175000,"c":1226209,"dc":["Email addresses","Employers","Job titles","Names","Phone numbers","Physical addresses"],"v":1,"x":"In August 2026, the French intellectual property software and services company Questel was the target of a ShinyHunters \"pay or leak\" extortion campaign. The group subsequently published an extensive corpus of data they alleged was obtained from the company, l"},{"n":"Carhartt","dom":"carhartt.com","bd":"2026-08-13","ad":1787693665000,"c":12933413,"dc":["Email addresses","Names","Phone numbers","Physical addresses"],"v":1,"x":"In August 2026, clothing retailer Carhartt was the target of a ShinyHunters \"pay or leak\" extortion campaign. The group subsequently published data allegedly obtained from the company including 12.9M unique email addresses, names, phone numbers and physical ad"},{"n":"NIUS","dom":"nius.de","bd":"2025-07-13","ad":1787523944000,"c":6090,"dc":["Bank account numbers","Email addresses","Names","Partial credit card data","Physical addresses","Purchases"],"v":1,"x":"In July 2025, the German news service NIUS suffered a data breach which was subsequently leaked publicly. The data included 6k unique email addresses along with names, physical addresses and payment details for purchases including either IBANs or partial credi"},{"n":"Golf Canada","dom":"golfcanada.ca","bd":"2026-05-14","ad":1787383043000,"c":568972,"dc":["Dates of birth","Email addresses","Genders","Geographic locations","Names","Usernames"],"v":1,"x":"In mid-2026, hundreds of thousands of user records allegedly sourced from Golf Canada began circulating via Telegram. The data included 569k unique email addresses along with names, usernames, dates of birth, genders and approximate geographic locations (city,"},{"n":"Oz Hair and Beauty","dom":"ozhairandbeauty.com","bd":"2026-08-15","ad":1787109300000,"c":1988331,"dc":["Email addresses","Geographic locations","Names","Phone numbers","Purchases"],"v":1,"x":"In August 2026, Australian beauty retailer Oz Hair and Beauty was the target of an xpl0itrs extortion attack. The group subsequently published data allegedly obtained from the company, which included 2M unique email addresses along with names, phone numbers, g"},{"n":"Fanlore","dom":"fanlore.org","bd":"2026-08-06","ad":1787105356000,"c":144520,"dc":["Email addresses","Names","Passwords","Usernames"],"v":1,"x":"In August 2026, the Organization for Transformative Works (OTW) identified unauthorised access to the Fanlore wiki it operates. The breach resulted in the exposure of 145k unique email addresses along with usernames and passwords stored as either MD5 or PBKDF2"},{"n":"RingCentral","dom":"ringcentral.com","bd":"2026-07-27","ad":1786618480000,"c":1596490,"dc":["Email addresses","Names","Phone numbers","Physical addresses"],"v":1,"x":"In July 2026, the cloud-based business communications platform RingCentral was the target of a ShinyHunters \"pay or leak\" extortion campaign. The group subsequently published data they claimed was obtained from the platform, which included 1.6M unique email ad"},{"n":"Alcon","dom":"alcon.com","bd":"2026-08-01","ad":1786269874000,"c":218395,"dc":["Email addresses","Names","Phone numbers","Physical addresses"],"v":1,"x":"In August 2026, the Alcon eye care company was named in a ShinyHunters \"pay or leak\" extortion campaign. The group subsequently published data allegedly sourced from Alcon containing 218k unique email addresses along with other largely corporate B2B contact fi"},{"n":"Brinks Home","dom":"brinkshome.com","bd":"2026-07-13","ad":1786185892000,"c":732162,"dc":["Dates of birth","Email addresses","Names","Partial credit card data","Phone numbers","Physical addresses"],"v":1,"x":"In July 2026, Brinks Home was targeted in a ShinyHunters \"pay or leak\" extortion campaign. The group subsequently published data they alleged was taken from the company, including 732k unique email addresses and other personal information relating to leads, cu"},{"n":"Exact Sciences","dom":"exactsciences.com","bd":"2026-07-15","ad":1786084049000,"c":10869543,"dc":["Dates of birth","Email addresses","Genders","Names","Personal health data","Phone numbers"],"v":1,"x":"In July 2026, Exact Sciences (now owned by Abbott Laboratories) was the target of a ShinyHunters \"pay or leak\" extortion campaign. The group claimed to have obtained data from the company's cancer diagnostics business, which they later published publicly. The "},{"n":"Inter-Con Security","dom":"icsecurity.com","bd":"2026-06-18","ad":1785973141000,"c":276114,"dc":["Email addresses","Employers","Job titles","Names","Phone numbers","Physical addresses"],"v":1,"x":"In June 2026, Inter-Con Security was targeted in a ShinyHunters “pay or leak” extortion campaign. The group subsequently published data it alleged was taken from the company, including 276k unique email addresses along with names, physical addresses, job title"},{"n":"SplitVPN","dom":"splitvpn.io","bd":"2026-07-21","ad":1785562166000,"c":865336,"dc":["Device information","Email addresses","Geographic locations","IP addresses","Partial credit card data"],"v":1,"x":"In July 2026, the Russian VPN service SplitVPN (previously known as NotVPN) suffered a data breach. The incident exposed millions of customer records, including 865k unique email addresses. Other impacted data included IP addresses, the user's country, and par"},{"n":"Houston City College","dom":"hccs.edu","bd":"2026-06-16","ad":1785218724000,"c":831642,"dc":["Academic records","Citizenship statuses","Dates of birth","Email addresses","Genders","Names"],"v":1,"x":"In June 2026, Houston City College was the target of a ShinyHunters \"pay or leak\" extortion campaign. Data allegedly obtained from the college was later published publicly and included 832k unique email addresses along with names, addresses, phone numbers, aca"},{"n":"Suno","dom":"suno.com","bd":"2025-11-25","ad":1784576991000,"c":55282226,"dc":["Email addresses","Names","Partial credit card data","Phone numbers","Physical addresses","Purchases"],"v":1,"x":"In November 2025, AI music generation tool Suno suffered a data breach that later came to light in July the following year. The data contained over 55M unique email addresses. Phone numbers were also present where they had been used as the sign-up method. Alth"},{"n":"Paidwork","dom":"paidwork.com","bd":"2026-03-29","ad":1784501838000,"c":23272765,"dc":["Bank account numbers","Dates of birth","Device information","Education levels","Email addresses","Financial transactions"],"v":1,"x":"In March 2026, hackers claimed they had obtained data from the gig economy platform Paidwork which they then listed for sale. Almost 11GB of data allegedly obtained from the platform was subsequently posted publicly in July and contained over 23M unique email "},{"n":"Fluke","dom":"fluke.com","bd":"2026-07-01","ad":1784102464000,"c":821100,"dc":["Email addresses","Employers","Job titles","Names","Physical addresses","Support tickets"],"v":1,"x":"In July 2026, electronic test and measurement equipment company Fluke was targeted in a ShinyHunters \"pay or leak\" extortion campaign. The group subsequently published more than 100GB of data allegedly taken from the company. The corpus contained largely corpo"},{"n":"Goose Creek","dom":"goosecreek.com","bd":"2026-06-09","ad":1784091794000,"c":6574121,"dc":["Email addresses","Names","Phone numbers","Physical addresses","Purchases"],"v":1,"x":"In June 2026, a party claiming to have access to data from Goose Creek Candle Company sent emails to a number of the company's customers, claiming the company had a security vulnerability and suffered a data breach. The data was subsequently sent to Have I Bee"},{"n":"Glendale Community College","dom":"glendale.edu","bd":"2026-06-15","ad":1783766409000,"c":793925,"dc":["Academic records","Dates of birth","Email addresses","Genders","Government issued IDs","Names"],"v":1,"x":"In June 2026, Glendale Community College was the target of a ShinyHunters \"pay or leak\" extortion campaign. Data allegedly obtained from Glendale was later published online and included almost 800k unique email addresses along with various other data fields, i"},{"n":"Moody Bible Institute","dom":"moody.edu","bd":"2026-06-15","ad":1783094605000,"c":2303416,"dc":["Dates of birth","Email addresses","Genders","Marital statuses","Names","Phone numbers"],"v":1,"x":"In June 2026, Moody Bible Institute was targeted by a ShinyHunters \"pay or leak\" extortion campaign. Over 2.3M unique email addresses and other personal data were later published publicly, including names, physical addresses, phone numbers, dates of birth and "},{"n":"Sysco","dom":"sysco.com","bd":"2026-06-15","ad":1782662249000,"c":2691852,"dc":["Customer feedback","Email addresses","Employers","Job titles","Names","Phone numbers"],"v":1,"x":"In June 2026, the food distribution company Sysco was targeted by a ShinyHunters \"pay or leak\" extortion campaign. Data was subsequently published containing 2.7M unique email addresses belonging to staff and customers. The data also contained largely corporat"},{"n":"American Tower","dom":"americantower.com","bd":"2026-06-12","ad":1782458243000,"c":216601,"dc":["Email addresses","Job titles","Names","Phone numbers","Physical addresses"],"v":1,"x":"In June 2026, telecommunications tower infrastructure company American Tower was the target of a ShinyHunters \"pay or leak\" extortion campaign. The group subsequently published data allegedly taken from the company containing more than 200k unique email addres"},{"n":"Madison Square Garden Sports","dom":"msgsports.com","bd":"2026-06-05","ad":1782306153000,"c":9796738,"dc":["Customer service records","Email addresses","Names","Phone numbers","Physical addresses"],"v":1,"x":"In June 2026, the sports and entertainment company Madison Square Garden Sports was the target of a ShinyHunters \"pay or leak\" extortion campaign. The group later published the alleged data, which included almost 10M unique email addresses spanning staff and c"},{"n":"JCPenney","dom":"jcpenny.com","bd":"2026-06-12","ad":1781924565000,"c":368418,"dc":["Dates of birth","Email addresses","Government issued IDs","Job titles","Names","Phone numbers"],"v":1,"x":"In June 2026, retailer JCPenney and associated brands were targeted in a ShinyHunters \"pay or leak\" extortion campaign. Data allegedly obtained from JCPenney through the exploitation of a critical zero-day vulnerability in Oracle PeopleSoft was later published"},{"n":"Ralph Lauren","dom":"ralphlauren.com","bd":"2026-06-11","ad":1781822914000,"c":139903,"dc":["Age groups","Email addresses","Genders","Names","Phone numbers"],"v":1,"x":"In June 2026, fashion retailer Ralph Lauren was targeted in a ShinyHunters \"pay or leak\" extortion campaign. The group subsequently published hundreds of gigabytes of data they claimed was obtained from the organisation's Salesforce instance, including 140k un"},{"n":"Operation Endgame 4.0","dom":"","bd":"2026-06-18","ad":1781813286000,"c":4348526,"dc":["Email addresses","Passwords"],"v":1,"x":"On 18 June 2026, the latest phase of Operation Endgame targeted the SocGholish malware operation, a prolific malware distribution network used to compromise systems and facilitate further cybercrime. Coordinated by international law enforcement agencies with s"},{"n":"CFGI","dom":"cfgi.com","bd":"2026-03-06","ad":1781752971000,"c":248235,"dc":["Email addresses","Employers","Job titles","Names","Phone numbers","Physical addresses"],"v":1,"x":"In March 2026, the financial consulting and advisory firm CFGI was the target of a ShinyHunters \"pay-or-leak\" extortion campaign. The group subsequently publicised data allegedly obtained from CFGI comprising corporate contact information, including 243k uniqu"},{"n":"June 2026 Stealer Logs","dom":"","bd":"2026-06-15","ad":1781551815000,"c":56278397,"dc":["Email addresses","Passwords"],"v":1,"x":"In June 2026, a collection of accumulated stealer logs from various sources was added to HIBP. The corpus comprised 56M unique email addresses across hundreds of millions of stealer log records. The data also contained 124M unique passwords, which have been ad"},{"n":"Berkadia","dom":"berkadia.com","bd":"2026-03-19","ad":1781496544000,"c":305216,"dc":["Email addresses","Employers","Names","Phone numbers","Physical addresses"],"v":1,"x":"In March 2026, the commercial real estate finance company Berkadia was the target of a ShinyHunters \"pay or leak\" extortion campaign. The group subsequently published data they alleged was taken from Berkadia's Salesforce instance, including over 300k unique e"},{"n":"Infinite Campus","dom":"infinitecampus.com","bd":"2026-03-18","ad":1781485422000,"c":137123,"dc":["Email addresses","Employers","Job titles","Names","Phone numbers","Physical addresses"],"v":1,"x":"In March 2026, the student information system Infinite Campus was targeted in a ShinyHunters \"pay or leak\" extortion campaign. The group subsequently published data they alleged was taken from Infinite Campus, containing 137k unique email addresses along with "},{"n":"University of Nottingham","dom":"nottingham.ac.uk","bd":"2026-06-09","ad":1781129611000,"c":454635,"dc":["Academic records","Citizenship statuses","Dates of birth","Disabilities","Email addresses","Ethnicities"],"v":1,"x":"In June 2026, the University of Nottingham was the target of a cyber attack, later linked to a ShinyHunters \"pay or leak\" extortion campaign. Tens of gigabytes of data were subsequently published online and included 455k unique email addresses along with exten"},{"n":"Baker Distributing","dom":"bakerdist.com","bd":"2026-05-23","ad":1780812996000,"c":102935,"dc":["Email addresses","Names","Phone numbers","Physical addresses","Support tickets"],"v":1,"x":"In May 2026, the HVAC/R wholesale distributor Baker Distributing Company was added to the ShinyHunters data extortion group's \"pay or leak\" site. In early June, the group publicly published data they claimed had been obtained from Baker's SharePoint and Salesf"},{"n":"BCD Travel","dom":"bcdtravel.com","bd":"2026-05-29","ad":1780642395000,"c":396313,"dc":["Email addresses","Employers","Job titles","Names","Phone numbers","Physical addresses"],"v":1,"x":"In May 2026, the corporate travel management company BCD Travel was claimed as a victim of the ShinyHunters \"pay or leak\" extortion campaign. Data allegedly obtained from BCD was subsequently published publicly in early June and contained 396k unique email add"},{"n":"DentaQuest","dom":"dentaquest.com","bd":"2026-05-23","ad":1780527390000,"c":2553599,"dc":["Dates of birth","Email addresses","Genders","Government issued IDs","Health insurance information","Names"],"v":1,"x":"In May 2026, the dental benefits administrator DentaQuest was the target of a ShinyHunters \"pay or leak\" extortion campaign that resulted in the group publicly publishing hundreds of gigabytes of data allegedly obtained from the company. The data included 2.6M"},{"n":"Edmunds","dom":"edmunds.com","bd":"2026-01-24","ad":1780299542000,"c":177860,"dc":["Device information","Email addresses","IP addresses","Passwords","Phone numbers","Usernames"],"v":1,"x":"In January 2026, the automotive research and car-shopping platform Edmunds was listed by the ShinyHunters hacking group as having been breached. Data purportedly obtained in the incident was later published publicly and included 178k unique email addresses, us"},{"n":"Atlas Menu","dom":"atlasmenu.net","bd":"2026-05-30","ad":1780184129000,"c":63926,"dc":["Email addresses","IP addresses","Passwords","Support tickets","Usernames"],"v":1,"x":"In May 2026, the GTA V and CS2 cheat service Atlas Menu suffered a data breach. An attacker claimed to have gained access to all Atlas systems and published the service's database to a public GitHub repository. The incident exposed 64k unique email addresses a"},{"n":"Charter","dom":"charter.com","bd":"2026-05-23","ad":1779998434000,"c":4851517,"dc":["Email addresses","Job titles","Names","Phone numbers","Physical addresses"],"v":1,"x":"In May 2026, the telecommunications company Charter Communications (the parent company behind the consumer broadband and cable brand Spectrum) was named by the ShinyHunters group in a \"pay or leak\" extortion campaign. The group later published the data, which "},{"n":"Kemper","dom":"kemper.com","bd":"2026-04-15","ad":1779952938000,"c":269299,"dc":["Email addresses","Names","Partial credit card data","Phone numbers","Physical addresses","Purchases"],"v":1,"x":"In April 2026, the American insurance holding company Kemper Corporation was named by the ShinyHunters ransomware group in a \"pay or leak\" extortion campaign. The attackers allegedly accessed Kemper's Salesforce environment via social engineering as part of a "},{"n":"Mytheresa","dom":"mytheresa.com","bd":"2026-04-12","ad":1779859065000,"c":84108,"dc":["Email addresses","Names","Partial credit card data","Phone numbers","Physical addresses","Purchases"],"v":1,"x":"In April 2026, the luxury fashion e-commerce platform Mytheresa was listed as a victim of the ShinyHunters \"pay or leak\" extortion group. After the ransom deadline passed, the group publicly released the data which contained 84k unique email addresses. The exp"},{"n":"Ameriprise","dom":"ameriprise.com","bd":"2026-03-02","ad":1779833022000,"c":502597,"dc":["Email addresses","Employers","Financial transactions","Job titles","Names","Phone numbers"],"v":1,"x":"In March 2026, the financial services firm Ameriprise Financial was named by the ShinyHunters group in a \"pay or leak\" extortion campaign. The group claimed possession of more than 200GB of compressed data exfiltrated from Ameriprise's Salesforce environment a"},{"n":"7-Eleven","dom":"7-eleven.com","bd":"2026-04-08","ad":1779599722000,"c":185256,"dc":["Dates of birth","Email addresses","Names","Phone numbers","Physical addresses"],"v":1,"x":"In April 2026, 7-Eleven was the victim of a \"pay or leak\" extortion campaign by ShinyHunters, with the data later published that month. The incident exposed 185k unique email addresses, along with names, physical addresses, dates of birth and phone numbers. A "},{"n":"Dragonica Lunaris","dom":"playdragonica.eu","bd":"2025-12-06","ad":1779338492000,"c":126293,"dc":["Dates of birth","Email addresses","Names","Passwords","Spoken languages","Usernames"],"v":1,"x":"In December 2025, the European Dragonica private server Dragonica Lunaris suffered a data breach. The incident exposed 126k email addresses, usernames, dates of birth and bcrypt password hashes. The service operator confirmed the breach and advised it has sinc"},{"n":"Windows93 / Myspace93","dom":"windows93.net","bd":"2021-01-01","ad":1779335115000,"c":46105,"dc":["Email addresses","IP addresses","Passwords","Usernames"],"v":1,"x":"In January 2021, the parody site Windows93 suffered a data breach of the Myspace93 sub-site after a beta application was exploited to download server files. The compromised data was later leaked in June and included 46k Myspace93 accounts containing email and "},{"n":"CTT","dom":"ctt.pt","bd":"2026-04-26","ad":1779150534000,"c":468124,"dc":["Email addresses","Names","Phone numbers"],"v":1,"x":"In April 2026, data allegedly obtained from CTT, Portugal's national postal service, was posted to a public hacking forum. The data included 468k unique email addresses along with names, phone numbers and parcel tracking numbers which can be used to retrieve t"},{"n":"Addi","dom":"addi.com","bd":"2026-03-25","ad":1779137751000,"c":34532941,"dc":["Age groups","Credit scores","Device information","Email addresses","Government issued IDs","Income levels"],"v":1,"x":"In March 2026, the Colombian fintech company Addi identified unauthorised activity on its platform and advised customers that \"it is possible that your personal information may have been compromised\". The \"pay or leak\" extortion group ShinyHunters subsequently"},{"n":"Abrigo","dom":"abrigo.com","bd":"2026-04-14","ad":1778729870000,"c":711099,"dc":["Email addresses","Employers","Job titles","Names","Phone numbers","Physical addresses"],"v":1,"x":"In April 2026, the fintech software company Abrigo was targeted in a \"pay or leak\" extortion attempt by the ShinyHunters group. Shortly after, data allegedly taken from the company's Salesforce instance was published publicly and contained over 700k unique ema"},{"n":"Canada Life","dom":"canadalife.com","bd":"2026-04-20","ad":1778655077000,"c":237810,"dc":["Email addresses","Job titles","Names","Phone numbers","Physical addresses","Salutations"],"v":1,"x":"In April 2026, Canada Life was the victim of a \"pay or leak\" extortion campaign by the ShinyHunters group. The group subsequently published the data which contained over 200k unique email addresses along with names, phone numbers, physical addresses and, in so"},{"n":"Cushman & Wakefield","dom":"cushmanwakefield.com","bd":"2026-05-05","ad":1778569096000,"c":310431,"dc":["Email addresses","Job titles","Names","Phone numbers","Physical addresses","Salutations"],"v":1,"x":"In May 2026, the real estate services firm Cushman & Wakefield was the target of a \"pay or leak\" extortion campaign by the ShinyHunters group. Following the threat, the group publicly published data they alleged had been obtained from the firm, consisting most"}]}