2026 Inter-Con Security — ShinyHunters dump; HIBP 276,100 emails (contacts/staff/leads)
Data compromised
HIBP-indexed 276.1k unique email addresses plus names, physical addresses, job titles, employers, and phone numbers spanning contacts, internal users, and leads
Technical writeup
Verified Inter-Con Security Systems breach — June–August 2026. Inter-Con Security Systems, Inc. (icsecurity.com), a Pasadena-based private security firm (not a cybersecurity consultancy), was named in a ShinyHunters pay-or-leak campaign around June 18, 2026 after an intrusion ClaimDepot and related notices place as early as June 5, 2026. Actor and plaintiff marketing cited roughly 2.7 million records; Indiana AG breach reporting was noted around June 23, 2026. Have I Been Pwned loaded the published corpus on August 5, 2026 with 276.1k unique email addresses plus names, physical addresses, job titles, employers, and phone numbers covering contacts, internal users, and leads. BreachHistory catalogs the HIBP-attested 276,100 figure as the verified denominator; the larger 2.7M figure remains an actor/litigation claim, not the HIBP unique-email count. Earlier catalog rows that described the victim as a generic 'cybersecurity firm' were corrected to Inter-Con’s private-security identity.
Root cause
ShinyHunters pay-or-leak extortion against Inter-Con Security Systems; published contact/staff/lead corpus later loaded by Have I Been Pwned
References
- https://haveibeenpwned.com/Breach/InterConSecurity
- https://www.claimdepot.com/data-breach/inter-con-security-systems-2026
- https://www.prnewswire.com/news-releases/privacy-alert-inter-con-security-systems-inc-under-investigation-for-data-breach-affecting-approximately-2-7-million-records-302824363.html
- https://www.dexpose.io/shinyhunters-compromise-ic-security-in-major-ransomware-attack/