Brinks Home Confirms Breach as ShinyHunters Threatens to Leak Data
Summary
Brinks Home confirmed attackers breached some systems, but said alarm monitoring was unaffected. ShinyHunters claims it stole Salesforce and customer support data; the company is investigating, and the alleged theft has not been verified.
Key points
- Brinks Home said it identified the breach on July 20 and activated its incident response process.
- The company said its alarm monitoring and system functionality were not affected.
- ShinyHunters claimed the intrusion began July 13 with a Microsoft Entra vishing attack.
- The group alleged it stole Salesforce records, employee data and customer support chat logs; BleepingComputer said it could not verify the claims.
- Brinks Home said it had not confirmed what information was involved or whose information may have been affected.
- The company warned customers about possible phishing messages impersonating Brinks Home or incident responders.
Article Details
- Victim Organization
- Brinks Home
- Incident Type
- System breach reportedly initiated through a Microsoft Entra voice-phishing (vishing) attack.
- Data Types Exposed
- Customer personally identifiable information (PII)
- Employee PII, including full names, email addresses, job titles, and phone numbers
- Customer support chat logs
- Affected Records
- ShinyHunters claimed more than 4.9 million Salesforce records were stolen. It separately claimed more than 1.1 million customer-data rows from Salesforce's Contacts object, more than 4,000 rows of employee PII, and more than 3.8 million customer support chat logs.
- Affected Data Size
- No data-size figure reported.
- Operational Impact
- Brinks Home said alarm monitoring and system functionality were not affected. The company activated its incident response process and continues to investigate.
- Ransom Or Extortion
- ShinyHunters claimed responsibility and threatened to leak data it said it stole. Brinks Home confirmed that an attacker threatened to release information they claimed to have taken. The claimed theft and data contents had not been independently verified by BleepingComputer or confirmed by Brinks Home.
- Claim Status
- confirmed
MITRE ATT&CK
People
Threat Actors
Vendors
Cresta#BrinksHomeMicrosoftShinyHunters claimed responsibility for the intrusion and said it used a Microsoft Entra vishing attack to steal Salesforce and customer support data, while Brinks Home continues to investigate.SalesforceShinyHunters claimed responsibility for the intrusion and said it used a Microsoft Entra vishing attack to steal Salesforce and customer support data, while Brinks Home continues to investigate.
Products
Cresta#BrinksHomeMicrosoft EntraShinyHunters claimed responsibility for the intrusion and said it used a Microsoft Entra vishing attack to steal Salesforce and customer support data, while Brinks Home continues to investigate.SalesforceShinyHunters claimed responsibility for the intrusion and said it used a Microsoft Entra vishing attack to steal Salesforce and customer support data, while Brinks Home continues to investigate.
Countries
CanadaBrinks Home generates approximately $830 million in annual revenue, employs up to 1,500 people, and provides home security services to more than 1 million customers across the United States, Canada, and Puerto Rico.United StatesBrinks Home generates approximately $830 million in annual revenue, employs up to 1,500 people, and provides home security services to more than 1 million customers across the United States, Canada, and Puerto Rico.