ShinyHunters claims Brinks Home breach, millions of Salesforce records exposed

The ShinyHunters ransomware group claims to have breached Brinks Home’s internal network, stealing more than 4.9 million Salesforce records containing personally identifiable information (PII).

 

Last month, Dallas-based smart home security provider Brinks Home disclosed a cyberattack affecting part of its internal IT systems. The company said it detected the intrusion on July 20, contained the incident, launched its response protocols, and engaged external cybersecurity experts to investigate. Brinks Home added that its core security products and alarm monitoring services were not affected and continued operating without disruption.

 

Acknowledging the reports of the data security incident, Chief Executive William Niles said customer security and the protection of the company’s internal systems remain key priorities. He added that Brinks Home is collaborating with digital forensic experts to investigate the incident, address its impact, and provide customers with ongoing updates.

 

Although the company did not identify those responsible for the cyberattack, it said the threat actor has claimed it will release the data accessed during the intrusion. Brinks Home warned that the stolen information could be made public.

 

 

Recently, the ShinyHunters extortion group has claimed responsibility for the cyber attack on Brinks Home listing it as a victim on its data leak site. The group claimed that it had exfiltrated “4.9M Salesforce records and 41GB of leaked files” from the company and threatened to publish the entire database unless its ransom demands were satisfied.

 

The threat actors told BleepingComputerAccording to ShinyHunters, the group breached Brinks Home on July 13 through a Microsoft Entra voice phishing (vishing) attack, gaining access by tricking an employee into approving an authentication request. The threat actor claimed to have exfiltrated more than 1.1 million Salesforce customer contact records, over 4,000 employee PII records—including names, email addresses, job titles, and phone numbers—and more than 3.8 million customer support chat logs from the Brinks Care Cresta platform.

 

Brinks Home said it is continuing to assess the scope of the breach and identify affected individuals. The company said it will notify those whose personal information was compromised in accordance with applicable requirements and provide updates through its website, cybersecurity update page, and customer account portal.