Home security provider Brinks Home is investigating unauthorized access to its IT systems after the ShinyHunters group claimed it stole more than 4.9 million Salesforce records containing personal information.
Brinks Home confirmed it identified the intrusion but has not named the intruder or the affected system. Leak-monitoring outfit Ransomware.live says ShinyHunters threatened to leak the data and cause several annoying digital problems unless the company negotiated by Thursday, July 30. It is unclear whether Brinks Home responded.
The company’s FAQ says its products and services appear unaffected, so alarms and security tools should keep working. Brinks Home said it is working to determine what information was involved and will notify affected individuals as required.
ShinyHunters has been prolific against Salesforce environments this year, claiming earlier to have stolen data from around 100 companies’ instances. Salesforce previously warned that a known threat actor was scanning for public-facing instances and abusing misconfigured guest accounts.
Brinks Home split from the Brinks Company brand in 2010 and is owned by Monitronics, which has filed for bankruptcy twice since 2019. The incident adds to a string of claimed Salesforce breaches, underscoring how misconfigured guest access keeps yielding customer data to the same group.
