Threatline

CyrusOne - 373,460 breached accounts

In August 2026, . The group subsequently published data allegedly obtained from the company, which included 373k unique email addresses across records relating to users, sales leads and CyrusOne employees. The data largely consisted of corporate contact information, including names, physical addresses, phone numbers and job titles. It also included support tickets and other information related to the organisation's operations. data centre operator CyrusOne was the target of a ShinyHunters "pay or leak" extortion attempt