/
← Voltar ao feed
medium food safety agriculture

ShinyHunters 'pay or leak' extortion of Neogen leaks 436k contact records, added to Have I Been Pwned

1 fonte(s) · 1 atualização(ões) · publicado 09/10/2026 04:06 · coletado há 1 dia

In August 2026, the food and animal safety company Neogen was targeted in a ShinyHunters "pay or leak" extortion attempt. The group later published data it claimed to have obtained from Neogen. The data consists largely of corporate contact records and includes 436k unique email addresses drawn from mailing lists, employee records and other contacts. Have I Been Pwned added the dataset on 9 Oct 2026.

Technical Details

  • Extortion model: "pay or leak" by ShinyHunters, with the data published after the attempt.
  • Exposed data: email addresses from mailing lists, employee records and other corporate contacts.
  • The breach occurred in August 2026. The article does not state the initial access vector or confirm any statement from Neogen.

Remediation

  • Affected individuals should use a password manager to set strong, unique passwords and enable 2FA wherever it is supported.
  • Because the exposed data is corporate contact information, recipients should expect targeted phishing and social engineering that uses the leaked details.

Linha do tempo

  1. haveibeenpwned.com ↗ · pub. 09/10/2026 04:06 · coletado 19/10 17:56 primeiro registro

    ShinyHunters 'pay or leak' extortion of Neogen leaks 436k contact records, added to Have I Been Pwned

    ler a análise desta fonte

    In August 2026, the food and animal safety company Neogen was targeted in a ShinyHunters "pay or leak" extortion attempt. The group later published data it claimed to have obtained from Neogen. The data consists largely of corporate contact records and includes 436k unique email addresses drawn from mailing lists, employee records and other contacts. Have I Been Pwned added the dataset on 9 Oct 2026.

    Technical Details

    • Extortion model: "pay or leak" by ShinyHunters, with the data published after the attempt.
    • Exposed data: email addresses from mailing lists, employee records and other corporate contacts.
    • The breach occurred in August 2026. The article does not state the initial access vector or confirm any statement from Neogen.

    Remediation

    • Affected individuals should use a password manager to set strong, unique passwords and enable 2FA wherever it is supported.
    • Because the exposed data is corporate contact information, recipients should expect targeted phishing and social engineering that uses the leaked details.