2026 American Tower — ShinyHunters pay-or-leak campaign; 217k+ emails indexed by HIBP (unverified by company)
Data compromised
Per Have I Been Pwned (June 26, 2026): 217k+ unique email addresses for employees, contractors, customers, and leads; names, job titles, phone numbers, and physical addresses in published corpus
Technical writeup
ShinyHunters extortion and leak — June 2026. American Tower Corporation, a major U.S. telecommunications tower infrastructure company, was listed in ShinyHunters' Oracle PeopleSoft zero-day campaign. After a pay-or-leak deadline, the group published data that Troy Hunt indexed in Have I Been Pwned on June 26, 2026 as 217,000+ unique email addresses spanning employees, contractors, customers, and leads, plus names, job titles, phone numbers, and physical addresses. American Tower had not issued a public breach confirmation at HIBP load time. BreachHistory indexes the HIBP attested 217k email count; company confirmation pending.
Root cause
ShinyHunters extortion campaign against American Tower Corporation (June 2026 PeopleSoft wave); group published data after non-payment—American Tower had not confirmed at HIBP catalog time