Loading story…
Inter-Con Security was reportedly targeted in a ShinyHunters "pay or leak" extortion campaign, and data the threat actor claimed to have stolen was later published online. The exposed dataset allegedly contained about 276,000 unique email addresses and roughly 276,114 total records, affecting a mix of contacts, internal users, and sales leads tied to the company.
The leaked information reportedly included names, physical addresses, job titles, phone numbers, employer details, and email addresses. The breadth of the exposed personal and business contact data raises immediate risks of targeted phishing, identity theft, impersonation, and other follow-on social engineering attacks, while no specific remediation details from Inter-Con Security were cited in the reporting.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
3 events from the most recent confirmed update back to the earliest known activity.
Have I Been Pwned published a breach notice for Inter-Con Security, alerting potentially affected users to the ShinyHunters-linked incident. The notice described exposure of 276,000 email addresses along with names, physical addresses, job titles, and phone numbers.
In June 2026, Inter-Con Security was reportedly targeted in a ShinyHunters "pay or leak" extortion campaign. One source specifies the breach date as 2026-06-18.
After the intrusion, ShinyHunters allegedly published data claimed to have been stolen from Inter-Con Security. The exposed dataset reportedly contained about 276,000 email addresses along with names, physical addresses, job titles, phone numbers, and employer information covering contacts, internal users, and leads.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
3 references tracked. Mallory keeps watching after this page renders.
cyberveille.ch
Open sourcehookphish.com
Open sourcehaveibeenpwned.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
ShinyHunters publicly leaked data from **Moody Bible Institute** after a "pay or leak" extortion attempt, exposing more than **2.3 million unique email addresses** along with names, physical addresses, phone numbers, dates of birth, and other personal details tied to donors, supporters, students, and alumni. Moody said it brought in internal and external cybersecurity specialists to investigate the breach and respond to the disclosure. The same threat activity has also been linked to attacks on **Oracle PeopleSoft** deployments, with the **National Association of Insurance Commissioners (NAIC)** saying attackers exploited a **zero-day** flaw to gain temporary access to part of its IT environment and steal confidential financial reporting, credit rating agency, and technical data that was later published online. NAIC said the intrusion was part of a broader campaign affecting multiple organizations after ShinyHunters claimed compromises of more than 100 PeopleSoft installations worldwide; the organization said no personally identifiable information or payment account data was involved, remediated affected systems with outside experts, and said the **FBI** was investigating.
Jul 10, 2026
Eye care company **Alcon** was listed in a ShinyHunters **"pay or leak"** extortion campaign after the threat actor allegedly exfiltrated company data and later published it. According to breach reporting, the leaked dataset contains about **218,000 unique email addresses** tied largely to business contacts rather than consumer accounts. The exposed information reportedly consists mostly of **corporate B2B contact data**, including names, phone numbers, physical addresses, and email addresses. Public breach tracking indicates the data was released after Alcon was targeted for extortion and the demanded payment was either refused or not made, making the incident part of a broader pattern of data-theft-led leak operations by ShinyHunters.
Aug 10, 2026
Houston City College suffered a data breach tied to the **ShinyHunters** threat group after attackers allegedly stole institutional data and used a **"pay or leak"** extortion tactic. When the demand was reportedly not met, the data was published publicly and on underground forums, exposing about **832,000 unique email addresses** linked to current students and alumni. The leaked records reportedly included names, home addresses, phone numbers, academic records, and other personal information, creating elevated risks of identity theft, phishing, and long-term privacy harm. The incident adds to a broader pattern of financially motivated attacks against educational institutions, where legacy systems, decentralized IT environments, and limited security budgets can increase exposure to data theft and extortion.
Jul 29, 2026