gcdRadar
closedclosed 28 Oct 2026Breaches & attacks4 Confirmed real-world loss

Crunchbase data breach exposes 559,908 accounts

Crunchbase

Crunchbase was targeted in a January 2026 extortion attempt by ShinyHunters resulting in exfiltrated corporate documents. The incident exposed approximately 560,000 accounts containing contact details and business profiles.

why this severityConfirmed breach exposing 559,908 user and lead accounts.

first report
14 Oct 2026
last update
14 Oct 2026

Timeline · 1

  1. 14 Oct 2026Crunchbase data breach exposes 559,908 accounts

Sources · 1

News and write-ups

  1. 2026-10-14
    Crunchbase data breach exposes 559,908 accounts
    Have I Been Pwned · haveibeenpwned.com/Breach/Crunchbase

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

AI role
No AI role
categories
General security
severity
4 · Confirmed real-world loss
targets
Not applicable
owasp llm top 10
no entry for these categories
mitre atlas
no technique for these categories
dates
happened 22 Jan 2026 · first reported 14 Oct 2026
origin
News & research feeds
record
confidence 0.95 · created 2026-10-26 14:52Z · updated 2026-10-30 06:04Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# Crunchbase data breach exposes 559,908 accounts

https://gcdradar.vercel.app/incidents/crunchbase-data-breach-exposes-559-908-accounts · AIR-2026-1523 · closed 2026-10-28

- Lane: Breaches & attacks
- Severity: 4 (Confirmed real-world loss): Confirmed breach exposing 559,908 user and lead accounts.
- Fix status: No fix needed
- First reported: 2026-10-14 (happened 2026-01-22)
- AI role: No AI role
- Products: Crunchbase

## Summary

Crunchbase was targeted in a January 2026 extortion attempt by ShinyHunters resulting in exfiltrated corporate documents. The incident exposed approximately 560,000 accounts containing contact details and business profiles.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-10-14: Crunchbase data breach exposes 559,908 accounts (https://haveibeenpwned.com/Breach/Crunchbase)

## Sources

- 2026-10-14 Have I Been Pwned: Crunchbase data breach exposes 559,908 accounts https://haveibeenpwned.com/Breach/Crunchbase

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. live
  2. live8.6
    UnrealIRCd CVE-2026-114713: UnrealIRCd improper neutralization of delimiters vulnerability

    Patch now · Exploited · Partly patched · since 13 Nov 2026 · CVE-2026-114713

  3. live
  4. live
    University of Texas at Arlington discloses data breach from cyberattack

    Breaches & attacks · Exploited · since 13 Nov 2026

  5. live
  6. live