ShinyHunters extortion of Crunchbase leaks 560k contact records, added to Have I Been Pwned
In January 2026, the company intelligence platform Crunchbase was targeted in a ShinyHunters "pay or leak" extortion attempt. Data allegedly stolen from the company was later published, covering about 560k unique email addresses, mostly belonging to leads and business contacts. Crunchbase subsequently confirmed that a threat actor had exfiltrated documents from its corporate network. Have I Been Pwned added the dataset on 14 Oct 2026, with 559.9k affected addresses.
Technical Details
- Extortion model: "pay or leak" by ShinyHunters, with the data published after the attempt.
- Exposed data: email addresses, names, physical addresses, phone numbers, job titles, employers and LinkedIn profiles.
- Breach occurred in January 2026. The article does not state the initial access vector.
Remediation
- Affected individuals should use a password manager to set strong, unique passwords and enable 2FA wherever it is supported.
- Because the exposed data is business contact information, recipients should expect targeted phishing and social engineering that uses the leaked details.
Linha do tempo
-
ShinyHunters extortion of Crunchbase leaks 560k contact records, added to Have I Been Pwned
ler a análise desta fonte ocultar
In January 2026, the company intelligence platform Crunchbase was targeted in a ShinyHunters "pay or leak" extortion attempt. Data allegedly stolen from the company was later published, covering about 560k unique email addresses, mostly belonging to leads and business contacts. Crunchbase subsequently confirmed that a threat actor had exfiltrated documents from its corporate network. Have I Been Pwned added the dataset on 14 Oct 2026, with 559.9k affected addresses.
Technical Details
- Extortion model: "pay or leak" by ShinyHunters, with the data published after the attempt.
- Exposed data: email addresses, names, physical addresses, phone numbers, job titles, employers and LinkedIn profiles.
- Breach occurred in January 2026. The article does not state the initial access vector.
Remediation
- Affected individuals should use a password manager to set strong, unique passwords and enable 2FA wherever it is supported.
- Because the exposed data is business contact information, recipients should expect targeted phishing and social engineering that uses the leaked details.