← Brinks Home (BH Security)

2026 Brinks Home — ShinyHunters; HIBP 732,162 emails (customers/leads/staff) + partial cards (Aug 8)

2026 732.2K records affected Share on X

Data compromised

HIBP-verified: 732,162 unique emails for leads, customers and staff, plus names, phone numbers, physical addresses, dates of birth, purchases, and partial credit card data (last 4, card type, expiry). Earlier actor marketing cited ~4.9M Salesforce-related rows / ~41GB — those larger figures remain unverified against HIBP’s unique-email count. Brinks says it will notify impacted parties consistent with law as review completes.

Technical writeup

Company-confirmed ShinyHunters incident with HIBP-attested scale — Brinks Home (BH Security) disclosed unauthorized access to a portion of its IT systems, with alarm monitoring continuing, and warned that an extortion party threatened to publish claimed stolen data (brinkshome.com/cybersecurity-update). ShinyHunters ran a pay-or-leak campaign and published a dump HIBP dated to July 13, 2026 and loaded on August 8, 2026: 732,162 unique email addresses covering leads, customers and staff, with names, phones, physical addresses, dates of birth, purchases and partial payment-card fields (last four digits, type, expiry). recordsAffected is updated from earlier actor-marketed ~4.9M Salesforce-row claims to the HIBP unique-email count. Customers should treat shipping/warranty and “alarm company” phishing as high risk and await any individual Brinks notices.

Root cause

Company-confirmed unauthorized access to a portion of IT systems (identified ~July 20, 2026; ShinyHunters claimed July 13 Entra vishing). Group published data; Have I Been Pwned loaded 732,162 unique emails on August 8, 2026. Alarm monitoring remained unaffected per Brinks.

References

Breaches you may like