Data Security

Allegedly stolen Pitney Bowes data leaked by ShinyHunters

Two years ago shipping services company Pitney Bowes was hit by a repeat ransomware attack by the Maze group. Today’s columnist, James Campbell of Cado Security, offers strategies for companies to prepare for repeat ransomware attacks. (Credit: JR James Slide Collection)

U.S. logistics technology firm Pitney Bowes had data purportedly stolen from its systems exposed by the ShinyHunters extortion group as part of its pay-or-leak attack spree, The Register reports.

The breach has been affirmed by Have I Been Pwned, which noted the inclusion of 8.2 million unique email addresses, physical addresses, names, and phone numbers in the leaked dataset. A portion of the database was said to include job titles and other company employment records. Pitney Bowes, which reported $1.9 billion in revenue in 2025 and over 600,000 customers worldwide, has yet to acknowledge the incident.

Such a development comes as ShinyHunters took responsibility for a string of attacks against Udemy, the Asian Football Confederation, and Carnival Cruises during the past week. ShinyHunters was already confirmed to have compromised Match Group, Odido, ADT, and Rockstar Games. The group also reportedly stole data from almost 400 companies in a Salesforce-linked breach.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy.

You can skip this ad in 5 seconds