Breaches and incidentsBriefReported by a reputable outlet, citing the company
Pitney Bowes: 8.2 million contacts taken from Salesforce after an employee email account was phished
Pitney Bowes said it “identified unauthorized access to certain records in our Salesforce customer relationship management environment” on 9 Apr 2026...
- Disclosed
What happened
- Pitney Bowes said it “identified unauthorized access to certain records in our Salesforce customer relationship management environment” on 9 Apr 2026, related to business customer accounts and contacts, with no sensitive personal data apparently accessed. HIBP (added 27 Apr): 8.2 million unique emails with names, phone numbers and addresses, plus some employee job titles. ShinyHunters claims 25 million records.
- Root cause per Pitney Bowes: phishing that compromised an employee’s email account, leading to Salesforce access.
- ShinyHunters claimed it; data released after negotiations failed.
- Business customers notified; outside experts and law enforcement engaged.
Sources
- https://www.theregister.com/2026/04/28/pitney_bowes_is_the_latest/
- https://haveibeenpwned.com/Breach/PitneyBowes
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.