Blog

A ShinyHunters-linked leak involving Inter-Con Security Systems exposed 285,983 indexed Salesforce and OneDrive records. The data includes names, emails, phones, addresses, usernames, Salesforce business records, and employee document inventory metadata.

A JCPenney leak indexed by leaksear.ch contains 138,226 HR-related records from employee, candidate, payroll, banking and HR exports. Public reporting and Have I Been Pwned link the exposure to ShinyHunters' June 2026 Oracle PeopleSoft extortion campaign.

A published Sysco dataset tied to ShinyHunters contains 7.7 million indexed records with customer and employee contact details. Public reporting links the incident to a Salesforce-focused extortion claim, while Have I Been Pwned reports 2.7 million unique email addresses in the published data.

A ShinyHunters-linked European Commission leak indexed by leaksear.ch contains 1,798 DIGIT SSO user records. The data includes names, email addresses, usernames, and user IDs, creating phishing and account-enumeration risk for affected users.

leaksear.ch has indexed 17,462 DentaQuest breach records from a May 2026 dataset with names and usernames searchable. Public reporting ties the broader DentaQuest incident to a ShinyHunters extortion leak affecting 2.6 million accounts.

A BCD Travel leak indexed by leaksear.ch contains 232,540 structured records from Azure and Salesforce exports. Public reporting links the incident to ShinyHunters' May 2026 pay-or-leak campaign, with exposed contact details, job titles, employer relationships and support-ticket metadata.

A May 2026 Baker Distributing leak exposed nearly 254,000 indexed records tied to Salesforce and SharePoint data. The data includes customer and employee contact details, support-ticket information, and internal account metadata that can fuel targeted phishing and fraud.