Data breach
Crunchbase data breach
In 2026, Crunchbase suffered a data breach affecting 357,003 records. Exposed data included names, surname, phone numbers and 3 other types of data.
Breach date
357 003
Records in the breach
6
Types of data exposed
Were you affected by the Crunchbase breach?
Enter your email address to see whether it appears in this breach — or any of the other breaches in Leak Database.
Data exposed in the Crunchbase breach
- Names
- Surname
- Phone Numbers
- Addresses
- Email Addresses
- Employment Information
About the breach
In January 2026, Crunchbase suffered a security incident when the cybercrime group ShinyHunters targeted the company in a "pay or leak" extortion campaign.
What Happened
• Attack Method: Attackers gained access to Crunchbase's corporate network using a voice-phishing (vishing) attack that tricked employees into handing over single sign-on (SSO) credentials.
• The Extortion: After Crunchbase refused to pay a ransom demand, ShinyHunters published a compressed archive (~400 MB) containing over 2 million records and internal documents online.
• Company Response: Crunchbase confirmed that documents were exfiltrated from its corporate network, stated that the incident was contained, and reported no disruption to business operations.
What Was Exposed
The leaked data and records included:
• Approximately 560,000 unique email addresses (mostly leads and business contacts)
• Names, phone numbers, and physical addresses
• Job titles, employers, and LinkedIn profiles
• Internal company documents and signed business contracts
What Happened
• Attack Method: Attackers gained access to Crunchbase's corporate network using a voice-phishing (vishing) attack that tricked employees into handing over single sign-on (SSO) credentials.
• The Extortion: After Crunchbase refused to pay a ransom demand, ShinyHunters published a compressed archive (~400 MB) containing over 2 million records and internal documents online.
• Company Response: Crunchbase confirmed that documents were exfiltrated from its corporate network, stated that the incident was contained, and reported no disruption to business operations.
What Was Exposed
The leaked data and records included:
• Approximately 560,000 unique email addresses (mostly leads and business contacts)
• Names, phone numbers, and physical addresses
• Job titles, employers, and LinkedIn profiles
• Internal company documents and signed business contracts
How to protect yourself
In order to protect yourself, we recommend the following:
1. Monitor your credit report for any suspicious activities. If you cannot do this yourself, make use of any online service that does this on your behalf.
2. Be aware of an increase in spam or scam emails or phone calls. We recommend making use of Apps like True Caller that could assist you in identifying possible scams.
1. Monitor your credit report for any suspicious activities. If you cannot do this yourself, make use of any online service that does this on your behalf.
2. Be aware of an increase in spam or scam emails or phone calls. We recommend making use of Apps like True Caller that could assist you in identifying possible scams.
Get told about the next breach
A free Leak Database account emails you when your address appears in a newly added breach.