Brinks Home confirms data breach after ShinyHunters claims attack

Residential security company Brinks Home has disclosed that hackers breached some of its systems and are threatening to leak allegedly stolen data, based on information published by Bleeping Computer.

Brinks Home identified the attack on July 20, though the ShinyHunters extortion gang claimed the breach occurred on July 13. The attackers allege they used a Microsoft Entra voice phishing (vishing) attack to gain access to employee accounts and exfiltrated over 1.1 million rows of customer data from Salesforce, along with data on Brinks Home employees and over 3.8 million customer support chat logs. Brinks Home confirmed that the attacker "has threatened to release information it claims to have taken" and is investigating to determine exactly what information was involved.

The company is warning customers about potential phishing attempts impersonating Brinks Home or other parties involved in the response. The intrusion did not impact the company’s alarm monitoring and system functionality.

Source: Bleeping Computer