Zero Radar
← feed
MediumData breachHIBP-Neogenupdated 25 Oct 2026, 13:32 UTC

Neogen data leak exposes 436k contact records after extortion attempt

Hackers claim they stole business contact details from the food and animal safety company Neogen and published them online. Anyone on those lists may now get more spam or phishing emails.

Official source
SeverityMediumData breach
Being exploited?UnclearNo reports either way yet
What to doCheck exposureBe wary of unsolicited messages referencing Neogen and avoid clicking links or sharing credentials based on them.
How sure is this?Official sourceBacked by an official source

How the attack works simplified

  1. 1ShinyHunters groupAttempts extortion against Neogen
  2. 2Neogen data takenCorporate contact records obtained
  3. 3Data published436k unique email addresses released
  4. 4Contacts exposedNames, emails, phones, employers exposed
  5. ResultContact details exposed for phishing

What happened

In August 2026 the ShinyHunters group attempted a 'pay or leak' extortion against Neogen and later published data it said came from the company, mostly corporate contact records including 436k unique email addresses.

Why it is dangerous: Exposed names, emails, phone numbers, employers and job titles can be used for targeted phishing and scam calls, especially against people who work for Neogen's customers or partners.

Are you affected?

You are affected if your name or work contact details were in Neogen's mailing lists, employee records or other contacts included in the published data.

Package / productAffected versionsFixed in
neogen.comsee advisoryno fix yet

What to do

  1. Check whether your email address appears in Have I Been Pwned
  2. Be suspicious of unexpected emails, calls or texts that mention Neogen or ask for logins or payments
  3. Change passwords and enable multi-factor authentication on accounts that use the same email address

Timeline

  1. 9 Oct 2026, 07:06 UTC
    Publicly disclosed
  2. 9 Oct 2026, 07:06 UTC
    Reported by Have I Been Pwned · Have I Been Pwned

Sources 1 report, oldest first

Official vendor, government CERT or advisory database

Technical details

ID
HIBP-Neogen
Disclosed
9 Oct 2026, 07:06 UTC
On Zero Radar
before the radar started
Last change
25 Oct 2026, 13:32 UTC

The plain-language parts and the attack diagram were written by an AI model (anthropic/claude-haiku-5.5) from the sources above. Facts like versions, exploitation and dates come from the sources themselves. How Zero Radar works

Neogen data leak exposes 436k contact records after extortion attempt · Zero Radar