Inter‑Con Security Breach Exposes 276,114 Employee and Lead Records in ShinyHunters Extortion Campaign
What Happened — In June 2026, the ShinyHunters extortion group compromised Inter‑Con Security and published a data set containing 276,114 unique records. The leak includes email addresses, names, physical addresses, job titles, and phone numbers for internal users, contacts, and sales leads.
Why It Matters for Trust & Control Assurance
- Demonstrates the risk of inadequate third‑party oversight: a breach of a security‑services vendor can expose the personal data of its customers and partners.
- Highlights the need for continuous monitoring and documented evidence that vendor security controls (access restrictions, data‑at‑rest encryption, incident‑response readiness) are operating as intended.
- Provides a concrete example of why a defensible audit trail of vendor risk assessments is essential for regulatory and contractual compliance.
Who Is Affected – Organizations that rely on Inter‑Con Security for physical‑security staffing, facility‑management services, or related consulting, spanning corporate, government, and education sectors.
Recommended Actions
- Review and update your third‑party risk management program to ensure Inter‑Con Security (or any similar vendor) is covered by a documented assessment.
- Request evidence of the vendor’s access‑control policies, encryption of stored personal data, and incident‑response procedures.
- Incorporate continuous monitoring feeds (e.g., breach‑notification feeds, security‑rating APIs) to detect future compromises promptly.
Technical Notes – The breach was delivered via a “pay‑or‑leak” extortion model; the exact initial intrusion vector was not disclosed. Exfiltrated data types: email addresses, full names, employer information, job titles, phone numbers, and physical mailing addresses. Source: Have I Been Pwned – Inter‑Con Security breach