Breachesby GlyphBCD Travel
Disclosed Jun 5, 2026396,313 accountsUnverified
In May 2026, the corporate travel management company BCD Travel was claimed as a victim of the ShinyHunters "pay or leak" extortion campaign . Data allegedly obtained from BCD was subsequently published publicly in early June and contained 396k unique email addresses. Other exposed data included names, addresses, phone numbers, job titles and employer names, spanning a variety of different data sets including leads, internal staff and support tickets.
What is known
| People affected | 396,313 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Jun 5, 2026 |
| Happened | May 29, 2026 |
| Attack | Extortion |
| Data exposed | EmailsEmploymentNamesPhone numbersAddresses |
| Sector | Hospitality |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
Notices filed
History of this record
First recordedby backfillSource
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.