In June 2026, Inter-Con Security was hit by a ShinyHunters “pay or leak” extortion campaign. After the demand, the group published data it claims was exfiltrated from the company, spanning contacts, internal users and leads. The dump includes roughly 276,000 unique email addresses along with names, physical addresses, job titles and phone numbers, now indexed in Have I Been Pwned.
While the leak does not appear to contain passwords, the combination of internal user emails, job titles and contact details is valuable for targeted phishing and social engineering. Attackers can map organizational roles to craft convincing credential-harvesting lures or business email compromise attempts against employees, which can serve as an initial foothold into identity infrastructure.
What to take away: treat exposed employee directories as reconnaissance fuel for account-takeover attempts. Reinforce phishing-resistant MFA, monitor for anomalous logins from affected accounts, and prime staff for a likely uptick in role-specific spear-phishing.