The most famous brand in physical security got pwned by ShinyHunters
A leading name in home and business physical security, Brinks Home, recently said it identified unauthorized access to a portion of its IT systems, an intrusion ShinyHunters claims it carried out to steal millions of records from the security provider's Salesforce instance.
Brinks Home hasn’t named the intruder or identified the affected system, but said the responsible party has threatened to leak information it claims to have taken.
“Brinks Home is working diligently to determine what information was involved and who may be affected,” the company statement said. “If the Company determines that personal information has been affected, it will notify those individuals as required and as appropriate.”
REG AD
An FAQ page for the incident said that Brinks Home products and services weren’t affected, as far as the company knows at this point, so alarms and other security tools should be working without issue.
REG AD
While Brinks may not have been very forthcoming with information, and lacks any sort of official way for media to communicate with it outside of sending a LinkedIn message it didn’t answer, the party that’s claimed responsibility has gone public with some details, and it’s none other than ShinyHunters with another claimed Salesforce breach.
According to leak site monitoring outfit Ransomware.live, ShinyHunters claimed to have obtained more than 4.9 million Salesforce records from Brinks Home “containing some PII.” The group threatened this week to leak the data along with causing “several annoying digital problems” if Brinks Home didn’t reach out by Thursday, July 30, to negotiate a ransom payment.
It’s not clear if Brinks Home has contacted ShinyHunters; Brinks Home didn’t respond to messages, and contacts The Register has for ShinyHunters appear to have changed, causing message and email rejections.
ShinyHunters has been a prolific Salesforce intruder of late, with the group claiming earlier this year to have stolen data from around 100 high-profile companies’ Salesforce instances. Salesforce has previously warned that an unnamed known threat actor group was actively scanning for public-facing Salesforce instances and abusing misconfigured guest accounts to break in.
MORE CONTEXT
- Moody Bible Institute breach leaves 2.3M accounts needing salvation, says cyber expert
- Council of Europe hacked in ShinyHunters' PeopleSoft heist
- ShinyHunters adds Charter to trophy shelf after 4.9M customer records leak
- Have I Been Pwned claims Pitney Bowes hit by 8.2M email address leak
-
security DEF CON bans Meta-style 'pervert glasses'
-
security Word worm crawls into Copilot, spreads chaos
-
DATABASES After rewriting SQLite in Rust, Turso turns its sights on Postgres
-
software Techie lured out of retirement to support software only he remembered
-
AI and ML Closed models refuse to help researcher swat Linux bug - DEVOPS Dev who gave HashiCorp its name returns with a faster terminal multiplexer Persistent sessions could be just the beginning
- SECURITY Anthropic and OpenAI are competing to see whose agents can go rogue harder Whoever wins, we lose
- SYSTEMS UK wants datacenters to pay a fee for grid connection requests Refundable charge intended to discourage time wasters from filing applications that will never be realized
- STORAGE GPUs could explode to multiple TB with new storage-inspired memory tech High-bandwidth flash promises SSD-like capacities with HBM-like speeds, but it's not all unicorns and rainbows
- AI and ML Open source project fools AI scrapers with poisoned font ShieldFont is available today if you've got copy that needs protecting
- Security Russians are posing as Signal support to launch phishing attacks PLUS: US takes down Iranian propaganda sites; Marketing company asks 'Why Do We Have Your Information?' And more!
- Security Microsoft patches failed to fix on-prem SharePoint, which is now under zero-day attack PLUS: China upgrades smartphone surveillance tools; Ring eases anti-snooping stance; and more
- Black Hat and DEF CON DEF CON Franklin project enlists hackers to harden critical infrastructure Voting village reports have been so successful, says Jeff Moss, that the whole of DEF CON will now be included
- Security EQT buys majority share in Swiss cybersecurity biz Acronis Went at equivalent of $3.5B+ valuation for entire firm, though portion sold not specified
- Malware Month Ten years since the first corp ransomware, Mikko Hyppönen sees no end in sight On the plus side, infosec's a good bet for a long, stable career
- FOSS smashed one Microsoft monopoly. After 20 years of failure, it's time to smash another Word up
- GNOME can look like Windows – and Flashback can do it without extensions New 'Simple-taskbar' is an option, but there's a simpler, stabler way
- A moment of silence, please, for the final release of Debian on x86-32 New Debian versions hit FOSSland in the form of 13.6 and 12.15
- Baddies caught exploiting extensions bugs with perfect 10 scores on vulnerable Joomla websites Flaws in iCagenda, Balbooa Forms extensions can impact open source CMS that powers a million sites worldwide
- Frame: A new X11 server – implemented directly in assembly Joins yserver, Phoenix, and of course XLibre – and outlier Arcan
- Cinnamon 6.8 will support Wayland – if you want it Next version of Linux Mint’s desktop has both kinds of display server
Brinks Home is no longer part of the larger Brinks brand, with The Brinks Company telling us it sold the home security arm in 2010. Brinks Home’s parent company, Monitronics, has filed for bankruptcy twice since 2019; for customers’ sake, we hope its physical security services are better than its financial management and infosec. ®
[](https://www.facebook.com/sharer.php?u=https%3A%2F%2Fwww.theregister.com%2Fsecurity%2F2026%2F07%2F31%2Fthe-most-famous-brand-in-physical-security-got-pwned-by-shinyhunters%2F5281924) [](https://twitter.com/intent/tweet?url=https%3A%2F%2Fwww.theregister.com%2Fsecurity%2F2026%2F07%2F31%2Fthe-most-famous-brand-in-physical-security-got-pwned-by-shinyhunters%2F5281924) [](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.theregister.com%2Fsecurity%2F2026%2F07%2F31%2Fthe-most-famous-brand-in-physical-security-got-pwned-by-shinyhunters%2F5281924) [](https://bsky.app/intent/compose?text=The%20most%20famous%20brand%20in%20physical%20security%20got%20pwned%20by%20ShinyHunters%0Ahttps%3A%2F%2Fwww.theregister.com%2Fsecurity%2F2026%2F07%2F31%2Fthe-most-famous-brand-in-physical-security-got-pwned-by-shinyhunters%2F5281924) [](https://www.reddit.com/submit?url=https%3A%2F%2Fwww.theregister.com%2Fsecurity%2F2026%2F07%2F31%2Fthe-most-famous-brand-in-physical-security-got-pwned-by-shinyhunters%2F5281924&title=The%20most%20famous%20brand%20in%20physical%20security%20got%20pwned%20by%20ShinyHunters) [](https://api.whatsapp.com/send?text=The%20most%20famous%20brand%20in%20physical%20security%20got%20pwned%20by%20ShinyHunters%0Ahttps%3A%2F%2Fwww.theregister.com%2Fsecurity%2F2026%2F07%2F31%2Fthe-most-famous-brand-in-physical-security-got-pwned-by-shinyhunters%2F5281924)
REG AD