ShellCodeX
Tools • Events • News • Insights
SEO Checker

Breach Tracker

Data breach timeline, exposure reports & source-backed impact intelligence

Tracking active
1,030
Breaches tracked
17,782,144,471
Accounts exposed
674
Password leaks
Golf Canada
Latest addition
1 day ago
Latest breach report

Golf Canada

golfcanada.ca

In mid-2026, hundreds of thousands of user records allegedly sourced from Golf Canada began circulating via Telegram. The data included 569k unique email addresses along with names, usernames, dates of birth, genders and approxima...

Accounts exposed569K
Breach date14 May 2026
Data classes6
ExposureLimited
Read the full breach report →
Showing 1–24 of 1,030 tracked breaches Source: Have I Been Pwned catalogue
Golf Canada golfcanada.ca
Limited

In mid-2026, hundreds of thousands of user records allegedly sourced from Golf Canada began circulating via Telegram. The data included 569k...

Accounts569K
Breach dateMay 2026
Data types6
Dates of birth Email addresses Genders +3 more
Oz Hair and Beauty ozhairandbeauty.com
Significant

In August 2026, Australian beauty retailer Oz Hair and Beauty was the target of an xpl0itrs extortion attack. The group subsequently publish...

Accounts2M
Breach dateAug 2026
Data types5
Email addresses Geographic locations Names +2 more
Fanlore fanlore.org
Limited

In August 2026, the Organization for Transformative Works (OTW) identified unauthorised access to the Fanlore wiki it operates. The breach r...

Accounts144.5K
Breach dateAug 2026
Data types4
Email addresses Names Passwords +1 more
RingCentral ringcentral.com
Significant

In July 2026, the cloud-based business communications platform RingCentral was the target of a ShinyHunters "pay or leak" extortion campaign...

Accounts1.6M
Breach dateJul 2026
Data types4
Email addresses Names Phone numbers +1 more
Alcon alcon.com
Limited

In August 2026, the Alcon eye care company was named in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published da...

Accounts218.4K
Breach dateAug 2026
Data types4
Email addresses Names Phone numbers +1 more
Brinks Home brinkshome.com
Limited

In July 2026, Brinks Home was targeted in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data they allege...

Accounts732.2K
Breach dateJul 2026
Data types7
Dates of birth Email addresses Names +4 more
Exact Sciences exactsciences.com
Major

In July 2026, Exact Sciences (now owned by Abbott Laboratories) was the target of a ShinyHunters "pay or leak" extortion campaign. The group...

Accounts10.9M
Breach dateJul 2026
Data types7
Dates of birth Email addresses Genders +4 more
Inter-Con Security icsecurity.com
Limited

In June 2026, Inter-Con Security was targeted in a ShinyHunters “pay or leak” extortion campaign. The group subsequently published data it a...

Accounts276.1K
Breach dateJun 2026
Data types6
Email addresses Employers Job titles +3 more
SplitVPN splitvpn.io
Limited

In July 2026, the Russian VPN service SplitVPN (previously known as NotVPN) suffered a data breach. The incident exposed millions of custome...

Accounts865.3K
Breach dateJul 2026
Data types5
Device information Email addresses Geographic locations +2 more
Houston City College hccs.edu
Limited

In June 2026, Houston City College was the target of a ShinyHunters "pay or leak" extortion campaign. Data allegedly obtained from the colle...

Accounts831.6K
Breach dateJun 2026
Data types8
Academic records Citizenship statuses Dates of birth +5 more
Suno suno.com
Major

In November 2025, AI music generation tool Suno suffered a data breach that later came to light in July the following year. The data contain...

Accounts55.3M
Breach dateNov 2025
Data types6
Email addresses Names Partial credit card data +3 more
Paidwork paidwork.com
Major

In March 2026, hackers claimed they had obtained data from the gig economy platform Paidwork which they then listed for sale. Almost 11GB of...

Accounts23.3M
Breach dateMar 2026
Data types14
Bank account numbers Dates of birth Device information +11 more
Fluke fluke.com
Limited

In July 2026, electronic test and measurement equipment company Fluke was targeted in a ShinyHunters "pay or leak" extortion campaign. The g...

Accounts821.1K
Breach dateJul 2026
Data types6
Email addresses Employers Job titles +3 more
Goose Creek goosecreek.com
Significant

In June 2026, a party claiming to have access to data from Goose Creek Candle Company sent emails to a number of the company's customers, cl...

Accounts6.6M
Breach dateJun 2026
Data types5
Email addresses Names Phone numbers +2 more
Glendale Community College glendale.edu
Limited

In June 2026, Glendale Community College was the target of a ShinyHunters "pay or leak" extortion campaign. Data allegedly obtained from Gle...

Accounts793.9K
Breach dateJun 2026
Data types8
Academic records Dates of birth Email addresses +5 more
Moody Bible Institute moody.edu
Significant

In June 2026, Moody Bible Institute was targeted by a ShinyHunters "pay or leak" extortion campaign. Over 2.3M unique email addresses and ot...

Accounts2.3M
Breach dateJun 2026
Data types7
Dates of birth Email addresses Genders +4 more
Sysco sysco.com
Significant

In June 2026, the food distribution company Sysco was targeted by a ShinyHunters "pay or leak" extortion campaign. Data was subsequently pub...

Accounts2.7M
Breach dateJun 2026
Data types8
Customer feedback Email addresses Employers +5 more
American Tower americantower.com
Limited

In June 2026, telecommunications tower infrastructure company American Tower was the target of a ShinyHunters "pay or leak" extortion campai...

Accounts216.6K
Breach dateJun 2026
Data types5
Email addresses Job titles Names +2 more
Madison Square Garden Sports msgsports.com
Significant

In June 2026, the sports and entertainment company Madison Square Garden Sports was the target of a ShinyHunters "pay or leak" extortion cam...

Accounts9.8M
Breach dateJun 2026
Data types5
Customer service records Email addresses Names +2 more
JCPenney jcpenny.com
Limited

In June 2026, retailer JCPenney and associated brands were targeted in a ShinyHunters "pay or leak" extortion campaign. Data allegedly obtai...

Accounts368.4K
Breach dateJun 2026
Data types8
Dates of birth Email addresses Government issued IDs +5 more
Ralph Lauren ralphlauren.com
Limited

In June 2026, fashion retailer Ralph Lauren was targeted in a ShinyHunters "pay or leak" extortion campaign. The group subsequently publishe...

Accounts139.9K
Breach dateJun 2026
Data types5
Age groups Email addresses Genders +2 more
Operation Endgame 4.0 domain unknown
Significant

On 18 June 2026, the latest phase of Operation Endgame targeted the SocGholish malware operation, a prolific malware distribution network us...

Accounts4.3M
Breach dateJun 2026
Data types2
Email addresses Passwords
CFGI cfgi.com
Limited

In March 2026, the financial consulting and advisory firm CFGI was the target of a ShinyHunters "pay-or-leak" extortion campaign. The group...

Accounts248.2K
Breach dateMar 2026
Data types6
Email addresses Employers Job titles +3 more
June 2026 Stealer Logs domain unknown
Major

In June 2026, a collection of accumulated stealer logs from various sources was added to HIBP. The corpus comprised 56M unique email address...

Accounts56.3M
Breach dateJun 2026
Data types2
Email addresses Passwords