2026 Alcon — ShinyHunters; HIBP 218.4k emails (B2B contacts) after pay-or-leak publish (unverified by Alcon)
Data compromised
HIBP: 218.4k unique email addresses with names, phone numbers and physical addresses — largely corporate B2B contact fields per HIBP. Earlier actor marketing cited >25M Salesforce records — that larger figure remains unverified against HIBP’s unique-email count.
Technical writeup
HIBP-attested published corpus after ShinyHunters extortion listing — Alcon (eye care) was named in a ShinyHunters pay-or-leak campaign in early August 2026. Have I Been Pwned loaded the published set on August 9, 2026: 218.4k unique emails with names, phones and physical addresses described as largely corporate B2B contact fields. Catalog recordsAffected updated from earlier unverified actor >25M Salesforce-row claim to HIBP’s unique-email count. Alcon had not issued a matching public confirmation in sources reviewed when HIBP indexed the dump — companyConfirmed remains false. Clinics/partners: watch CRM phishing citing Alcon.
Root cause
ShinyHunters pay-or-leak campaign naming Alcon; group published a corpus HIBP loaded August 9, 2026. Alcon had not publicly confirmed the compromise at indexing of the HIBP load.