In August 2026, data centre operator CyrusOne was the target of a ShinyHunters "pay or leak" extortion attempt . The group subsequently published data allegedly obtained from the company, which included 373k unique email addresses across records relating to users, sales leads and CyrusOne employees. The data largely consisted of corporate information, including names, physical addresses, phone numbers and job titles. It also included support tickets and other information related to the organisation's operations.
Use a password manager to generate and store strong, unique passwords for all your accounts. 1Password helps protect your data with industry-leading security.
Affected Addresses: 373.5k
Breach Occurred: August 2026
Added to HIBP: 7 Oct 2026
If you haven’t already changed the password affected by this breach, do so immediately on every account where it was used.
Wherever 2FA is supported, add an extra layer of security to your account.
Use a password manager to generate and store strong, unique passwords for all your accounts. 1Password helps protect your data with industry-leading security.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
