Brinks Home data breach: 732K accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2026-08-08
In July 2026, Brinks Home was targeted in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data they alleged was taken from the company, including 732k unique email addresses and other personal information relating to leads, customers and Brinks staff such as name, phone numbers and physical addresses. The data also included purchases from Brinks along with partial credit card data (last 4 digits, card type and expiry). In Brinks' disclosure notice, they acknowledged the incident and risk of disclosure, and advised that they would notify impacted parties "consistent with applicable law". Exposed data: dates of birth, email addresses, names, partial credit card data, phone numbers, physical addresses, purchases. The breach dates from Jul 13, 2026; Have I Been Pwned loaded it on Aug 8, 2026.
What to do
- If you had a Brinks Home account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
