ADT disclosed unauthorized access to cloud environments after an April 20, 2026 incident later claimed by ShinyHunters. The leaksear.ch index covers 8.66M customer, lead, and support-case records, while Have I Been Pwned lists 5.5M unique email addresses.
Aman Resorts CRM data indexed by leaksear.ch contains 283,251 records from an April 2026 breach. Public reporting ties the exposure to a ShinyHunters pay-or-leak campaign involving Salesforce CRM data, with emails, names, addresses, phones, dates of birth, nationalities, and VIP status in scope.