Sysco

Disclosed Jun 28, 20262 months ago2,691,852 accountsConfirmed

In June 2026, the food distribution company Sysco was targeted by a ShinyHunters "pay or leak" extortion campaign . Data was subsequently published containing 2.7M unique email addresses belonging to staff and customers. The data also contained largely corporate contact information including names, phone numbers, physical addresses, internal job titles, and customer feedback.

What is known

People affected	2,691,852 (accounts in the leaked data, per Have I Been Pwned)
Disclosed	Jun 28, 2026
Happened	Jun 15, 2026
Attack	Extortion
Data exposed	Emails, Employment, Names, Phone numbers, Addresses, Social Security numbers
Sector	Tech · US
Status	Confirmed
Check your email	Have I Been Pwned

Sources

Source	Kind
Have I Been Pwned: Syscohaveibeenpwned.com · Aggregator	Aggregator
Vermont Attorney General breach report: Syscoago.vermont.gov · Official notice	Official notice

Notices filed

Where	Filed	People
Have I Been Pwnedaccounts in the data	Jun 28	2,691,852
Vermont AGresidents of VT	Jul 28	9

Other breaches at Sysco

Breach	Disclosed	Attack	Sector	Status	Affected
Disclosed May 5, 2023May 5, 20233 years agoHacking	May 5, 20233 years ago	Hacking	Tech	Confirmed	126K

History of this record

2026-09-25 · source_type: aggregator to official · backfill source
2026-09-25 · source_url: https://haveibeenpwned.com/Breach/Sysco to https://ago.vermont.gov/categories/security-breach-notices · backfill source
2026-09-25 · status: disclosed to confirmed · backfill source
2026-09-25 · verified_by: empty to vt-ag · backfill source
2026-09-25 · verified: 0 to 1 · backfill source
2026-09-25 · data_types: ["emails","employment","names","phone","addresses"] to ["emails","employment","names","phone","addresses","ssn"] · backfill source
2026-09-25 · added · backfill source

First seen 2026-09-25 (Have I Been Pwned), confirmed by Vermont AG. Record counts are as reported. Not legal advice.

Everything about Sysco

What is known

Sources

Notices filed

Other breaches at Sysco

New breaches by email