Brinks Home Confirms Breach as ShinyHunters Threatens to Leak 4.9 Million Salesforce Records
The residential security company says its alarm systems were not affected, but the extortion group claims to hold customer contacts, employee data and millions of support chat logs.
Key points
- Brinks Home identified the intrusion on July 20 and says its alarm monitoring service was not affected.
- The extortion group ShinyHunters claims it broke into the company on July 13 through a phone-based phishing call targeting a Microsoft Entra account.
- ShinyHunters says it took more than 4.9 million records, including 1.1 million rows of customer contacts and 3.8 million customer support chat logs.
- Brinks Home confirms the attacker has threatened to publish the data and warns customers to expect scam messages that impersonate the company.
- Brinks Home serves more than 1 million customers across the United States, Canada, and Puerto Rico.
Brinks Home, the residential alarm and smart-home provider, has confirmed that intruders broke into some of its systems and are now threatening to publish data they claim to have stolen.
The company said it detected the attack on July 20 and started its incident response process the same day. Chief executive William Niles said Brinks Home is working with outside forensics specialists to investigate.
Alarm monitoring, the service that watches sensors and cameras in customers' homes, was not affected. The break-in sat on the corporate side of the business.
Who claims responsibility, and how did they get in?
The extortion group ShinyHunters has claimed the attack. In a conversation with BleepingComputer, the group said it broke into Brinks Home on July 13 using a vishing call, meaning a phone call in which a criminal impersonates IT support and talks an employee through logging in or approving a security prompt.
The target was Microsoft Entra, Microsoft's cloud identity service that controls who gets to sign in to company systems. Once the employee completed the authentication or registration step on the caller's instruction, the attacker had a working account.
From there, according to the group, they pivoted into Salesforce, the customer database many large companies run their sales and support on.
What data is at risk?
ShinyHunters says it took a large volume of personal information from Brinks Home's Salesforce and support tools. The company has not confirmed the specific numbers, and no one outside the attackers has reviewed the files.
| Data set claimed | Volume | Source system |
|---|---|---|
| Customer contact records | 1.1 million rows | Salesforce "Contacts" object |
| Employee personal details | 4,000+ rows | Salesforce |
| Customer support chat logs | 3.8 million | Brinks Care (Cresta) |
The employee records reportedly include full names, work email addresses, job titles and phone numbers. Brinks Home has told customers it has "not yet confirmed exactly what information was involved or whose" and that it will notify affected people directly if their data was taken.
Should Brinks Home customers be worried?
There is no sign that home alarms or cameras were touched, so the physical security of a customer's house is not in question. The risk is the personal data.
Brinks Home is warning customers to expect fraudulent messages that impersonate the company or others involved in the response. The advice is simple: do not reply, do not click any links, and delete the message.
If a call or email pressures you to "verify" your account or hand over a code, hang up and call Brinks Home back on the number printed on your bill or the app.
The wider picture
ShinyHunters has spent 2024 and 2025 running the same play against large Salesforce customers, tricking a single employee over the phone into approving access, then draining customer objects at speed. Brinks Home joins a growing list of companies caught by that exact sequence.
The company generates roughly $830 million in annual revenue and employs up to 1,500 people. It sells alarm panels, sensors, cameras and smart-home devices such as locks and thermostats to more than 1 million customers.
Brinks Home says its investigation is continuing and that notifications will follow once the scope is clear.
