2026 Fluke Corporation — ShinyHunters extortion; 821K emails on HIBP (Jul)
Data compromised
HIBP-indexed 821,100 unique email addresses with names, phone numbers, physical addresses, employers, job titles, and support tickets—largely corporate contact and support data; ShinyHunters marketed >21M Salesforce records / >100GB—HIBP email count used for catalog
Technical writeup
HIBP-verified published corpus — July 15, 2026. Fluke Corporation, the Fortive-owned electronic test and measurement manufacturer, was listed on the ShinyHunters leak site on July 2, 2026 after alleged failed ransom negotiations; BreachNews reported the actors claimed more than 100GB including over 21 million Salesforce records with PII. Have I Been Pwned subsequently loaded published data containing 821,100 unique email addresses plus names, phones, physical addresses, employers, job titles, and a large set of support cases. Fluke had not issued a matching public FAQ for this ShinyHunters dump at HIBP load time. This July 2026 published corpus is distinct from Fluke's California Attorney General notification stub covering an August 10–October 7, 2025 intrusion (~18K notified per trade press). BreachHistory indexes the HIBP 821,100 email count.
Root cause
ShinyHunters pay-or-leak extortion campaign against Fluke Corporation; group listed Fluke July 2 claiming 100GB+ / 21M Salesforce records, then published corpus indexed by Have I Been Pwned July 15, 2026—distinct from Fluke's earlier CA AG Aug–Oct 2025 intrusion notice