Zero Radar
← feed
MediumData breachHIBP-Crunchbaseupdated 25 Oct 2026, 13:32 UTC

Crunchbase data breach exposes business contacts' personal details

Hackers stole company files from Crunchbase and published them online. If your contact details were in those files, criminals may now send you convincing phishing emails or calls.

Official source
SeverityMediumData breach
Being exploited?UnclearNo reports either way yet
What to doCheck exposureBe wary of unsolicited messages that use your business details, and verify any request through a separate known channel before acting.
How sure is this?Official sourceBacked by an official source

How the attack works simplified

  1. 1ShinyHunters extortionDemanded payment to avoid leak
  2. 2Corporate network breachedDocuments exfiltrated from Crunchbase
  3. 3Contact data stolenEmails, phones, addresses, job titles
  4. 4Data published onlineLeak made publicly available
  5. 5Phishing risk to contactsTargeted scams using exposed details
  6. ResultBusiness contacts exposed to targeted scams

What happened

A ShinyHunters extortion attempt against Crunchbase in January 2026 led to exfiltrated corporate documents, which were later published publicly.

Why it is dangerous: About 560k unique email addresses were exposed along with names, phone numbers, physical addresses, job titles, employers and LinkedIn profiles, putting business contacts at risk of targeted phishing and social engineering.

Are you affected?

You are affected if your business contact details (email, phone, job title, employer, or LinkedIn profile) were held by Crunchbase and included in the leaked data.

Package / productAffected versionsFixed in
crunchbase.comsee advisoryno fix yet

What to do

  1. Check whether your email address appears in the Have I Been Pwned Crunchbase breach entry
  2. Be suspicious of unexpected emails, calls or messages referencing your job, employer or business dealings
  3. Enable multi-factor authentication on your important accounts
  4. Change passwords for any accounts reused with the affected email address

Timeline

  1. 14 Oct 2026, 06:01 UTC
    Publicly disclosed
  2. 14 Oct 2026, 06:01 UTC
    Reported by Have I Been Pwned · Have I Been Pwned

Sources 1 report, oldest first

Official vendor, government CERT or advisory database

Technical details

ID
HIBP-Crunchbase
Disclosed
14 Oct 2026, 06:01 UTC
On Zero Radar
before the radar started
Last change
25 Oct 2026, 13:32 UTC

The plain-language parts and the attack diagram were written by an AI model (anthropic/claude-haiku-5.5) from the sources above. Facts like versions, exploitation and dates come from the sources themselves. How Zero Radar works

Crunchbase data breach exposes business contacts' personal details · Zero Radar