BCD Travel
Disclosed Jun 5, 20263 months ago396,313 accountsUnverified
In May 2026, the corporate travel management company BCD Travel was claimed as a victim of the ShinyHunters "pay or leak" extortion campaign . Data allegedly obtained from BCD was subsequently published publicly in early June and contained 396k unique email addresses. Other exposed data included names, addresses, phone numbers, job titles and employer names, spanning a variety of different data sets including leads, internal staff and support tickets.
What is known
| People affected | 396,313 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Jun 5, 2026 |
| Happened | May 29, 2026 |
| Attack | Extortion |
| Data exposed | Emails, Employment, Names, Phone numbers, Addresses |
| Sector | Hospitality |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| Have I Been Pwned: BCD Travelhaveibeenpwned.com · Aggregator | Aggregator |
Notices filed
| Where | Filed | People |
|---|---|---|
| Have I Been Pwnedaccounts in the data | Jun 5 | 396,313 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.