Data breach
Baker Distributing Company data breach
In 2026, Baker Distributing Company suffered a data breach affecting 105,493 records. Exposed data included names, surname, address and 2 other types of data.
Breach date
105 493
Records in the breach
5
Types of data exposed
Were you affected by the Baker Distributing Company breach?
Enter your email address to see whether it appears in this breach — or any of the other breaches in Leak Database.
Data exposed in the Baker Distributing Company breach
- Names
- Surname
- Address
- Phone Numbers
- Email Addresses
About the breach
In May and June 2026, Baker Distributing Company, a U.S. wholesale distributor of HVAC, refrigeration, and foodservice equipment, suffered a data breach linked to the ShinyHunters cyber extortion group.
Key Details of the Incident:
• Timeline: Baker Distributing was added to ShinyHunters' "pay or leak" extortion site around May 23, 2026, with a payment deadline of May 27, 2026. When demands were not met, the group publicly published the stolen datasets in early June 2026.
• Attack Vector: The incident was part of a broader campaign targeting misconfigured Salesforce Experience Cloud guest user settings and third-party/integration layer access, rather than a direct breach of Salesforce's core infrastructure. Data from Baker's SharePoint environment was also reportedly compromised.
• Exposed Data: The leaked data primarily affected the company's HVAC contractor customer base and corporate records. It included roughly 188,000 to 260,000 total records (with about 103,000 unique email addresses).
• Compromised Fields: Names, physical addresses, phone numbers, unique email addresses, support case/ticket numbers, internal comments, and account management details.
Key Details of the Incident:
• Timeline: Baker Distributing was added to ShinyHunters' "pay or leak" extortion site around May 23, 2026, with a payment deadline of May 27, 2026. When demands were not met, the group publicly published the stolen datasets in early June 2026.
• Attack Vector: The incident was part of a broader campaign targeting misconfigured Salesforce Experience Cloud guest user settings and third-party/integration layer access, rather than a direct breach of Salesforce's core infrastructure. Data from Baker's SharePoint environment was also reportedly compromised.
• Exposed Data: The leaked data primarily affected the company's HVAC contractor customer base and corporate records. It included roughly 188,000 to 260,000 total records (with about 103,000 unique email addresses).
• Compromised Fields: Names, physical addresses, phone numbers, unique email addresses, support case/ticket numbers, internal comments, and account management details.
How to protect yourself
In order to protect yourself, we recommend the following:
1. Monitor your credit report for any suspicious activities. If you cannot do this yourself, make use of any service that does this on your behalf.
2. Be on the lookout for an increase in number of spam or scam calls and emails. We recommend you make use of Apps like True Caller, which can assist you in identifying any possible spam or scam calls.
3. Be sure to monitor your bank account transactions. Ensure you receive real time notifications on any transaction.
1. Monitor your credit report for any suspicious activities. If you cannot do this yourself, make use of any service that does this on your behalf.
2. Be on the lookout for an increase in number of spam or scam calls and emails. We recommend you make use of Apps like True Caller, which can assist you in identifying any possible spam or scam calls.
3. Be sure to monitor your bank account transactions. Ensure you receive real time notifications on any transaction.
Get told about the next breach
A free Leak Database account emails you when your address appears in a newly added breach.