ShinyHunters claims Brinks Home breach, threatens to leak stolen data
ShinyHunters claims breach of Brinks Home, threatens to leak 4.9M Salesforce records via vishing attack.
Brinks Home, a major US residential security provider serving over 1 million customers, disclosed a breach discovered on July 20 after ShinyHunters compromised its systems via Microsoft Entra voice phishing on July 13. The threat actor claims to have stolen 4.9M Salesforce records including customer PII, 4,000+ employee records, and 3.8M customer support chat logs, threatening to release the data publicly. Brinks Home is investigating and has notified forensics experts; the company warns customers of potential follow-up fraud attempts.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Brinks Home?
Get an email when a new story names Brinks Home, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonShinyHunters gained initial access to Brinks Home's systems through a voice phishing (vishing) attack targeting Microsoft Entra credentials, demonstrating that even security-focused companies are vulnerable to social engineering. The seven-day gap between compromise (July 13) and discovery (July 20) allowed the attackers ample time to exfiltrate millions of Salesforce records containing sensitive customer PII and chat logs. This breach highlights the critical importance of phishing-resistant multi-factor authentication (MFA) and robust employee training specifically around telephone-based social engineering tactics. The scale of the data stolen — nearly 5 million customer records — creates lasting fraud and identity theft risks for affected individuals, amplifying the regulatory and reputational consequences for Brinks Home.
What helps against this
How we list vendors- Phishing-resistant MFA
A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.
- Identity threat detection and response (ITDR)
Attackers who log in with real, stolen credentials get noticed.
- Security awareness training and phishing simulation
People recognise and report attacks instead of falling for them.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — Microsoft Entra voice phishing (vishing)