Tessera

New breach: Manchester Airports Group was breached last month, with FulcrumSec later publishing 8.7M email addresses. Data included phone numbers, vehicle registrations, parking history and airport purchases. 62% were already in @haveibeenpwned. More: haveibeenpwned.com/Breach/Manch...

Have I Been Pwned: Manchester Airports Group Data Breach

In August 2026, Manchester Airports Group (MAG) disclosed a data breach impacting their services. The incident was later claimed by the FulcrumSec hacking group, who subsequently published email addre...

haveibeenpwned.com

New breach: Questel was targeted in a ShinyHunters extortion campaign last month. Data allegedly from the company was published with 1.2M emails, names, employers, job titles, addresses and phone numbers. 51% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/Questel

Have I Been Pwned: Questel Data Breach

In August 2026, the French intellectual property software and services company Questel was the target of a ShinyHunters "pay or leak" extortion campaign. The group subsequently published an extensive ...

haveibeenpwned.com

New breach: Carhartt was the target of a ShinyHunters extortion campaign earlier this month. Data allegedly obtained from the company was later published, including 12.9M unique email addresses. 83% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Carha...

Have I Been Pwned: Carhartt Data Breach

In August 2026, clothing retailer Carhartt was the target of a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data allegedly obtained from the company including 12.9M ...

haveibeenpwned.com

New sensitive breach: German news service NIUS had 6k unique email addresses exposed in a breach last year. Data also included names, physical addresses, purchases and partial payment details. 51% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/NIUS

Have I Been Pwned: NIUS Data Breach

In July 2025, the German news service NIUS suffered a data breach which was subsequently leaked publicly. The data included 6k unique email addresses along with names, physical addresses and payment d...

haveibeenpwned.com

New breach: Golf Canada had 569k unique email addresses allegedly obtained from its service around the middle of this year. Data also included name, DoB, gender and appx geographic location. 76% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/GolfC...

Have I Been Pwned: Golf Canada Data Breach

In mid-2026, hundreds of thousands of user records allegedly sourced from Golf Canada began circulating via Telegram. The data included 569k unique email addresses along with names, usernames, dates o...

haveibeenpwned.com

New breach: Oz Hair and Beauty was targeted in an xpl0itrs extortion attack this week. Data allegedly obtained in the attack was subsequently leaked, including 2M email addresses and other personal data. 73% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/OzHai...

Have I Been Pwned: Oz Hair and Beauty Data Breach

In August 2026, Australian beauty retailer Oz Hair and Beauty was the target of an xpl0itrs extortion attack. The group subsequently published data allegedly obtained from the company, which included ...

haveibeenpwned.com

New breach: Fanlore suffered a breach earlier this month exposing 145k unique email addresses. Data also included usernames and passwords stored as either MD5 or PBKDF2 hashes. 23% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Fanlore

Have I Been Pwned: Fanlore Data Breach

In August 2026, the Organization for Transformative Works (OTW) identified unauthorised access to the Fanlore wiki it operates. The breach resulted in the exposure of 145k unique email addresses along...

haveibeenpwned.com

New breach: RingCentral was targeted in a ShinyHunters extortion attack last month. The group subsequently published 1.6M email addresses and other personal info allegedly from the company. 44% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/RingC...

Have I Been Pwned: RingCentral Data Breach

In July 2026, the cloud-based business communications platform RingCentral was the target of a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data they claimed was obt...

haveibeenpwned.com

New breach: Alcon was targeted in a ShinyHunters extortion campaign, with data allegedly from the eye care company published this month. It included 218k email addresses and largely corporate B2B contact info. 49% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/Alcon

haveibeenpwned.com

New breach: Last month, Brinks Home was targeted by a ShinyHunters extortion, who later published 732k unique email addresses allegedly taken in the breach. Data included purchases and partial card data. 78% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Brink...

Have I Been Pwned: Brinks Home Data Breach

In July 2026, Brinks Home was targeted in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data they alleged was taken from the company, including 732k unique email ad...

haveibeenpwned.com

New sensitive breach: Exact Sciences was targeted by a ShinyHunters extortion campaign last month. The group later published 10.9M email addresses and other personal data, including health information. 75% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Exact...

Have I Been Pwned: Exact Sciences Data Breach

In July 2026, Exact Sciences (now owned by Abbott Laboratories) was the target of a ShinyHunters "pay or leak" extortion campaign. The group claimed to have obtained data from the company's cancer dia...

haveibeenpwned.com

New breach: Inter-Con Security was targeted by ShinyHunters in a pay or leak extortion campaign in June. 276k unique email addresses were subsequently published, along with names, physical addresses and more. 44% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/Inter...

Have I Been Pwned: Inter-Con Security Data Breach

In June 2026, Inter-Con Security was targeted in a ShinyHunters “pay or leak” extortion campaign. The group subsequently published data it alleged was taken from the company, including 276k unique ema...

haveibeenpwned.com

New breach: SplitVPN had 865k unique email addresses breached last week. Data also included IP address, country and partial payment card data. 37% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Split...

Have I Been Pwned: SplitVPN Data Breach

In July 2026, the Russian VPN service SplitVPN (previously known as NotVPN) suffered a data breach. The incident exposed millions of customer records, including 865k unique email addresses. Other impa...

haveibeenpwned.com

New breach: Houston City College was the target of a ShinyHunters extortion attempt last month. Over 800k unique email addresses were later published with name, physical address, phone number and more. 30% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/Houst...

Have I Been Pwned: Houston City College Data Breach

In June 2026, Houston City College was the target of a ShinyHunters "pay or leak" extortion campaign. Data allegedly obtained from the college was later published publicly and included 832k unique ema...

haveibeenpwned.com

New breach: Data from Suno's November 2025 breach surfaced publicly last week. The corpus contained over 55M unique email addresses plus tens of thousands of Stripe payment records. 24% were already in @haveibeenpwned. More: haveibeenpwned.com/Breach/Suno

Have I Been Pwned: Suno Data Breach

In November 2025, AI music generation tool Suno suffered a data breach that later came to light in July the following year. The data contained over 55M unique email addresses. Phone numbers were also ...

haveibeenpwned.com

New breach: Paidwork allegedly suffered a breach in March that was offered for sale before being published this month. Data included profile data, banking info, payout history and bcrypt password hashes. 35% were already in @haveibeenpwned. Read more: haveibeenpwned.com/Breach/Paidw...

Have I Been Pwned: Paidwork Data Breach

In March 2026, hackers claimed they had obtained data from the gig economy platform Paidwork which they then listed for sale. Almost 11GB of data allegedly obtained from the platform was subsequently ...

haveibeenpwned.com

New breach: Earlier this month, Fluke was targeted in a ShinyHunters extortion campaign. The group published more than 800k email addresses along with largely corporate contact information and support cases. 51% were already in @haveibeenpwned. Read more: haveibeenpwned.com/Breach/Fluke

Have I Been Pwned: Fluke Data Breach

In July 2026, electronic test and measurement equipment company Fluke was targeted in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published more than 100GB of data allegedl...

haveibeenpwned.com

New breach: Last month, some Goose Creek customers received emails claiming a vulnerability and breach. Data later sent to HIBP contained 6.6M email addresses, names, phone numbers and physical addresses. 84% were already in @haveibeenpwned. Read more: haveibeenpwned.com/Breach/Goose...

Have I Been Pwned: Goose Creek Data Breach

In June 2026, a party claiming to have access to data from Goose Creek Candle Company sent emails to a number of the company's customers, claiming the company had a security vulnerability and suffered...

haveibeenpwned.com

New breach: Glendale Community College was the target of a ShinyHunters extortion attempt last month. Nearly 800k unique email addresses were later published with name, physical address, phone number and more. 28% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/Glend...

Have I Been Pwned: Glendale Community College Data Breach

In June 2026, Glendale Community College was the target of a ShinyHunters "pay or leak" extortion campaign. Data allegedly obtained from Glendale was later published online and included almost 800k un...

haveibeenpwned.com

New breach: Moody Bible Institute was targeted by a ShinyHunters extortion campaign last month with 2.3M email addresses later published. Data also included name, address, phone and other personal info. 76% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Moody...

Have I Been Pwned: Moody Bible Institute Data Breach

In June 2026, Moody Bible Institute was targeted by a ShinyHunters "pay or leak" extortion campaign. Over 2.3M unique email addresses and other personal data were later published publicly, including n...

haveibeenpwned.com

New breach: Sysco was the target of a ShinyHunters extortion campaign earlier this month. Subsequently published data contained 2.7M unique email addresses plus largely corporate contact information. 44% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Sysco

Have I Been Pwned: Sysco Data Breach

In June 2026, the food distribution company Sysco was targeted by a ShinyHunters "pay or leak" extortion campaign. Data was subsequently published containing 2.7M unique email addresses belonging to s...

haveibeenpwned.com

New breach: American Tower was the target of a ShinyHunters extortion campaign earlier this month. Leaked data included 217k unique email addresses along with names, phone numbers, and addresses. 62% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Ameri...

Have I Been Pwned: American Tower Data Breach

In June 2026, telecommunications tower infrastructure company American Tower was the target of a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data allegedly taken fr...

haveibeenpwned.com

New breach: Madison Square Garden Sports was the target of a ShinyHunters extortion campaign earlier this month. Almost 10M email addresses and extensive staff and customer relationship data was later published. 80% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/Madis...

Have I Been Pwned: Madison Square Garden Sports Data Breach

In June 2026, the sports and entertainment company Madison Square Garden Sports was the target of a ShinyHunters "pay or leak" extortion campaign. The group later published the alleged data, which inc...

haveibeenpwned.com