Data breach
Abrigo data breach
In 2026, Abrigo suffered a data breach affecting 920,367 records. Exposed data included names, surname, company names and 4 other types of data.
Breach date
920 367
Records in the breach
7
Types of data exposed
Were you affected by the Abrigo breach?
Enter your email address to see whether it appears in this breach — or any of the other breaches in Leak Database.
Data exposed in the Abrigo breach
- Names
- Surname
- Company Names
- Email Addresses
- Phone Numbers
- Addresses
- Account Information
About the breach
In April 2026, the financial technology and compliance software provider Abrigo suffered a data breach carried out by the ShinyHunters cybercrime group.
Key Details of the Breach
• Attack Method: The threat actors targeted Abrigo via a social-engineering campaign directed at its integrated Salesforce environment.
• Extortion Attempt: ShinyHunters launched a "pay-or-leak" extortion demand before publishing the data on a hacker forum in mid-April 2026 after payment was refused.
• Compromised Data: The incident exposed over 1.7 million total Salesforce records, including approximately 779,000 to nearly 794,000 unique individual profiles featuring:
• Emails (approx. 793,000)
• Names (approx. 749,000)
• Phone numbers (approx. 369,000)
• Street addresses (approx. 276,000)
• Internal corporate identifiers and Salesforce metadata (passwords were not reported as exposed)
• Impacted Parties: Employees and business contacts linked to financial institutions and credit unions that use Abrigo’s risk management, lending, and anti-money laundering (AML) software.
Key Details of the Breach
• Attack Method: The threat actors targeted Abrigo via a social-engineering campaign directed at its integrated Salesforce environment.
• Extortion Attempt: ShinyHunters launched a "pay-or-leak" extortion demand before publishing the data on a hacker forum in mid-April 2026 after payment was refused.
• Compromised Data: The incident exposed over 1.7 million total Salesforce records, including approximately 779,000 to nearly 794,000 unique individual profiles featuring:
• Emails (approx. 793,000)
• Names (approx. 749,000)
• Phone numbers (approx. 369,000)
• Street addresses (approx. 276,000)
• Internal corporate identifiers and Salesforce metadata (passwords were not reported as exposed)
• Impacted Parties: Employees and business contacts linked to financial institutions and credit unions that use Abrigo’s risk management, lending, and anti-money laundering (AML) software.
How to protect yourself
In order to start protecting yourself from possible fraud in future, we highly recommend the following steps:
1. Monitor your credit reports for possible suspicious activities. If you cannot do this yourself, we recommend you sign up with online services that does this on your behalf.
2. Be on the lookout for an increase in spam or fraudulent calls. We recommend you make use of mobile apps like True Caller, which can assist you in identifying potential spam or fraudulent calls.
3. Monitor your banking transactions. Ensure that you are receiving notifications of transactions by either SMS, your app or email.
1. Monitor your credit reports for possible suspicious activities. If you cannot do this yourself, we recommend you sign up with online services that does this on your behalf.
2. Be on the lookout for an increase in spam or fraudulent calls. We recommend you make use of mobile apps like True Caller, which can assist you in identifying potential spam or fraudulent calls.
3. Monitor your banking transactions. Ensure that you are receiving notifications of transactions by either SMS, your app or email.
Get told about the next breach
A free Leak Database account emails you when your address appears in a newly added breach.