Threat actor claims leak of 219,566 Alcon customer emails
A threat actor on an underground forum claims to have leaked an Alcon database linked to the MyAlcon.com platform: 219,566 unique email rows across 470 CSV files with names, phone numbers and account IDs. Alcon has not confirmed an incident and the claim remains unverified. If real, the source expects targeted phishing impersonating Alcon or MyAlcon; warn staff and customers about fake messages.
What happened
A threat actor on an underground forum claims to have leaked an Alcon customer database linked to the MyAlcon.com platform. The dump allegedly holds 219,566 unique email rows across 470 CSV files. Alcon has not confirmed an incident and the claim is unverified.
Why it matters
If confirmed, customer names, emails, phone numbers and account IDs would be exposed. The source says the field names look like a CRM export, suggesting eye care professionals and customers, with no sign of patient medical files. The immediate risk flagged is targeted phishing impersonating Alcon or MyAlcon account notices.
What to do
Wait for an official statement from Alcon and monitor its channels. Warn staff and customers about fake emails from Alcon or MyAlcon. If the company uses the MyAlcon platform, tighten verification of inbound messages.
For the technical team
- Affected
- Base de clientes da Alcon (plataforma MyAlcon.com), gigante suíço de cuidados oculares e lentes de contato · Alcon customer database linked to the MyAlcon.com platform. No specific product or version cited.
- Exploitation
- No vulnerability exploitation reported. Claim posted on an underground forum and shared by DailyDarkWeb on 2026-10-28; the source classifies it as an unverified threat-actor claim, with no breach confirmation from Alcon.
- Fix
- No fix applicable. The source identifies no product vulnerability or patch; Alcon has not confirmed an incident.
- Vector
- Not described in the source. The claim is a leak of a database that looks like a CRM export; no details on how the data was obtained.
- More details
- The alleged dump holds first, middle and last names, email addresses, phone, mobile and fax numbers, account and record IDs, and account creation dates, across 470 CSV files with 219,566 unique email rows. DailyDarkWeb analyst note: field names look like a CRM export and records may cover eye care professionals and customers, with no sign of patient medical files. If real, the source expects targeted phishing impersonating Alcon or MyAlcon account notices. Alcon has not confirmed an incident known to the source.
Timeline
Actor claims leak of 219,566 records tied to the MyAlcon.com platform.
Sources 1 source
- @DailyDarkWeb @DailyDarkWeb
