Every public data breach

44 disclosed this week · 26,355 on record

Questel

Disclosed Sep 1, 20261,226,209 accountsUnverified

In August 2026, the French intellectual property software and services company Questel was the target of a ShinyHunters "pay or leak" extortion campaign . The group subsequently published an extensive corpus of data they alleged was obtained from the company, largely comprising corporate contact information associated with sales leads, support cases and marketing activities, with 1.2M unique email addresses. The data also included names, employers and job titles, along with physical addresses and phone numbers.

What is known

People affected1,226,209 (accounts in the leaked data, per Have I Been Pwned)
DisclosedSep 1, 2026
HappenedAug 1, 2026
AttackExtortion
Data exposedEmailsEmploymentNamesPhone numbersAddresses
SectorTech
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Check your emailHave I Been Pwned

Sources

Notices filed

History of this record
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about Questel