All breaches
ZenBusiness data breach5.1M accounts compromised on 2026-03-27
Verified
ZenBusiness (zenbusiness.com) was the source of a data breach dated 2026-03-27, exposing 5,118,184 accounts. The details below are mirrored from Have I Been Pwned and reflect the source's account of the incident at the time of publication.
Incident Report
| Target Organization | ZenBusiness |
|---|---|
| Source Name | ZenBusiness |
| Domain | zenbusiness.com |
| Breach Date | 2026-03-27 |
| Added to HIBP | 2026-05-02 |
| Accounts Compromised | 5,118,184(5.1M) |
| Data Exposed | Email addressesNamesPhone numbers |
| Status | Verified by HIBP |
Description
In March 2026, the hacker and extortion group "ShinyHunters" claimed to have obtained a substantial corpus of data from ZenBusiness, a business formation and compliance platform. The group claimed the data had been exfiltrated from platforms including Snowflake, Mixpanel and Salesforce, and threatened to publish it if a ransom was not paid. The following month, after claiming payment had not been made, ShinyHunters publicly released the data. The collection amounted to many terabytes across thousands of files that appeared to originate from multiple systems and business functions, including leads, support records and other CRM-related data. The data contained approximately 5M unique email addresses, often accompanied by name and phone number depending on the source file.
Disclaimer
HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.