Data breach
Alert360 data breach
In 2026, Alert360 suffered a data breach affecting 772,637 records. Exposed data included last activity, account owner, account name and 4 other types of data.
Breach date
772 637
Records in the breach
7
Types of data exposed
Were you affected by the Alert360 breach?
Enter your email address to see whether it appears in this breach — or any of the other breaches in Leak Database.
Data exposed in the Alert360 breach
- Last Activity
- Account Owner
- Account Name
- Billing Information
- Shipping Information
- Phone numbers
- Website
About the breach
The Alert 360 Data Security Incident involved unauthorized system access starting around April 4, 2026, linked to a broader campaign by the cybercrime group ShinyHunters.
Incident Timeline
• April 4, 2026: Unauthorized access to Alert 360 systems occurred.
• April 18–19, 2026: The ShinyHunters group publicized the leak and claimed responsibility after ransom negotiations broke down.
• May 4, 2026: Alert 360 published an official statement confirming the security incident.
Scope and Impact
• Compromised Records: The threat actor group claimed roughly 2.5 million records (~10 GB of compressed data) were exposed on the dark web. Subsequent third-party indices like LeakCheck identified a subset of over 370,000 specific records.
• Exposed Data Types: Names, email addresses, physical mailing addresses, and telephone numbers.
• What Was Not Exposed: Alert 360 stated that sensitive personally identifiable information (PII) such as Social Security numbers, financial/banking data, alarm system arm/disarm codes, and security credentials were not compromised.
• Operations: Customer security-monitoring systems and alarm services remained fully operational throughout and after the incident.
Underlying Attack Vector
• The breach was part of a 2026 campaign by ShinyHunters utilizing techniques such as vishing (voice phishing) and stolen OAuth / Salesforce connected app authorizations.
Response and Remediation
• Forensics: Alert 360 partnered with third-party cybersecurity forensics experts to contain and resolve the vulnerability.
• Security Enhancements: The company deployed upgraded system safeguards, stricter access controls, and heightened network monitoring.
• Class Action Investigations: Multiple U.S. law firms (including Migliaccio & Rathod LLP and Ahdoot & Wolfson, PC) launched investigations into potential class-action litigation regarding consumer privacy exposure.
Incident Timeline
• April 4, 2026: Unauthorized access to Alert 360 systems occurred.
• April 18–19, 2026: The ShinyHunters group publicized the leak and claimed responsibility after ransom negotiations broke down.
• May 4, 2026: Alert 360 published an official statement confirming the security incident.
Scope and Impact
• Compromised Records: The threat actor group claimed roughly 2.5 million records (~10 GB of compressed data) were exposed on the dark web. Subsequent third-party indices like LeakCheck identified a subset of over 370,000 specific records.
• Exposed Data Types: Names, email addresses, physical mailing addresses, and telephone numbers.
• What Was Not Exposed: Alert 360 stated that sensitive personally identifiable information (PII) such as Social Security numbers, financial/banking data, alarm system arm/disarm codes, and security credentials were not compromised.
• Operations: Customer security-monitoring systems and alarm services remained fully operational throughout and after the incident.
Underlying Attack Vector
• The breach was part of a 2026 campaign by ShinyHunters utilizing techniques such as vishing (voice phishing) and stolen OAuth / Salesforce connected app authorizations.
Response and Remediation
• Forensics: Alert 360 partnered with third-party cybersecurity forensics experts to contain and resolve the vulnerability.
• Security Enhancements: The company deployed upgraded system safeguards, stricter access controls, and heightened network monitoring.
• Class Action Investigations: Multiple U.S. law firms (including Migliaccio & Rathod LLP and Ahdoot & Wolfson, PC) launched investigations into potential class-action litigation regarding consumer privacy exposure.
How to protect yourself
In order to start protecting yourself from possible fraud in future, we highly recommend the following steps:
1. Be sure to monitor your credit report to identify any possible suspicious activities, such as finance applications. If you are unable to do this personally, sign up with a service doing this on your behalf.
2. Immediately change your password on the affected website, but also any other website where you may re-use this password.
3. Download the Google or Microsoft Authenticator App on your mobile device. Activate 2FA authentication on any website you use, which allow for it.
4. Consider call identification apps on your mobile device, such as True Caller, which could assist in identifying possible scam calls.
1. Be sure to monitor your credit report to identify any possible suspicious activities, such as finance applications. If you are unable to do this personally, sign up with a service doing this on your behalf.
2. Immediately change your password on the affected website, but also any other website where you may re-use this password.
3. Download the Google or Microsoft Authenticator App on your mobile device. Activate 2FA authentication on any website you use, which allow for it.
4. Consider call identification apps on your mobile device, such as True Caller, which could assist in identifying possible scam calls.
Get told about the next breach
A free Leak Database account emails you when your address appears in a newly added breach.