Breachesby GlyphSysco
Disclosed Jun 28, 20261,468 affectedConfirmed
In June 2026, the food distribution company Sysco was targeted by a ShinyHunters "pay or leak" extortion campaign . Data was subsequently published containing 2.7M unique email addresses belonging to staff and customers. The data also contained largely corporate contact information including names, phone numbers, physical addresses, internal job titles, and customer feedback.
What is known
| People affected | 1,468 (as reported by the organization) |
|---|---|
| Disclosed | Jun 28, 2026 |
| Happened | Jun 15, 2026 |
| Attack | Extortion |
| Data exposed | EmailsEmploymentNamesPhone numbersAddressesSocial Security numbers |
| Sector | Tech · US |
| Status | Confirmed |
| Check your email | Have I Been Pwned |
Sources
Notices filed
Other breaches at Sysco
History of this record
hibp to organizationby weeklySource
2691852 to 1468by weeklySource
aggregator to officialby backfillSource
https://haveibeenpwned.com/Breach/Sysco to https://ago.vermont.gov/categories/security-breach-noticesby backfillSource
disclosed to confirmedby backfillSource
empty to vt-agby backfillSource
0 to 1by backfillSource
["emails","employment","names","phone","addresses"] to ["emails","employment","names","phone","addresses","ssn"]by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (Have I Been Pwned), confirmed by Vermont AG. Record counts are as reported. Not legal advice.