2026 Vertex Inc — 2M+ records (ShinyHunters)
Data compromised
Personally identifiable information, internal corporate data
Technical writeup
ShinyHunters claimed responsibility for breaching Vertex Inc., a US-based tax technology company, in March 2026. Over 2 million records containing PII and internal corporate data were reportedly compromised. Attack announced March 10, 2026. Part of broader ShinyHunters campaign targeting Salesforce customers and Okta SSO credentials. Claim flagged as unverified by some researchers.
Root cause
ShinyHunters; likely Salesforce/Okta credential compromise