Brinks Home data breach
732,162 accounts exposed in a breach on 13 July 2026.
At a glance
732,162
Accounts exposed
13 July 2026
Date of the breach
8 August 2026
Added to the list
What happened
In July 2026, Brinks Home was targeted in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data they alleged was taken from the company, including 732k unique email addresses and other personal information relating to leads, customers and Brinks staff such as name, phone numbers and physical addresses. The data also included purchases from Brinks along with partial
What was exposed
- Dates of birth. Dates of birth were exposed. They help criminals prove they are you, and they cannot be changed.
- Email addresses. Email addresses were exposed. Expect more spam and phishing aimed at those addresses.
- Names. Names were exposed. Scammers use real names to make a message look personal.
- Partial credit card data. Part of a payment card number was exposed. On its own it is limited, but scammers use it to sound convincing.
- Phone numbers. Phone numbers were exposed. Expect scam calls and text messages, some of them pretending to be the organisation.
- Physical addresses. Home or postal addresses were exposed. They can be used to make a scam letter or a fake identity look real.
- Purchases. Records of what you bought were exposed. Scammers use them to make messages look genuine.
What to do now
It depends on what was exposed, so these steps follow the list above.
If payment details were exposed
- Check your bank and card statements for charges you do not recognise.
- Tell your bank. Ask about replacing the card or watching the account.
- Be wary of calls or messages that say they are from your bank and ask you to move money or read out a code.
If your contact details were exposed
- Expect more spam, scam calls and phishing. Do not click links or open attachments in messages you did not expect.
- If a message mentions this breach, do not reply. Go to the organisation's own website or app instead of using a link in the message.
Whatever was exposed
- Check which other breaches include your own email address and phone number.
- Keep an eye on your accounts for a few months. Breached data is often used long after the breach.
- If you think someone is using your details, report it to the organisation and to your national cyber crime reporting service.
Check your own exposure
- Password leak check: find out whether a password has appeared in a breach. The password never leaves your browser.
- Free domain security scan: grade the email, DNS and website security of a domain you own.
Related breaches
Other breaches that exposed some of the same kinds of data.
University of Nottingham
In June 2026, the University of Nottingham was the target of a cyber attack, later linked to a ShinyHunters "pay or leak" extortion campaign.
- Academic records
- Citizenship statuses
- Dates of birth
- Disabilities
- +11 more
Read what happened
Kemper
In April 2026, the American insurance holding company Kemper Corporation was named by the ShinyHunters ransomware group in a "pay or leak" extortion campaign.
- Email addresses
- Names
- Partial credit card data
- Phone numbers
- +2 more
Read what happened
Sharecare
In August 2026, the digital health company Sharecare was the target of a ShinyHunters "pay or leak" extortion campaign.
- Dates of birth
- Email addresses
- Employers
- Genders
- +6 more
Read what happened