Claim: ShinyHunters leaks 80,000 Ingram Content Group users' data
The ShinyHunters extortion group published 80,190 records it claims were stolen from Ingram Content Group after a failed pay-or-leak attempt. According to the group, the data includes full names, email addresses, physical addresses and phone numbers from a breach it says occurred in April 2026. Affected users should watch for phishing using these details.
What happened
The ShinyHunters extortion group has published 80,190 records it claims were stolen from Ingram Content Group, the major US book distributor, after a failed pay-or-leak extortion attempt. The actor claims the data includes full names, email addresses, physical addresses and phone numbers. Ingram has not publicly confirmed the incident.
Why it matters
Combined personal data enables targeted phishing against Ingram customers and partners. The group says the full haul is 1.70 GB and this release leaves out SharePoint folders, so further leaks are possible. The true scope remains unconfirmed.
What to do
Warn customers and staff about messages referencing Ingram accounts that request data or payment. Reinforce sender and link verification. Watch for an official Ingram statement.
For the technical team
- Affected
- Ingram Content Group (grande distribuidora de livros e empresa de serviços editoriais dos EUA); dados de usuários public · Ingram Content Group, US book distributor and publishing services company (claimed). Public release: 80,190 user records with full names, email addresses, physical addresses and phone numbers.
- Exploitation
- Leak published by the ShinyHunters group after failed extortion; reported by DailyDarkWeb on X. Unverified threat-actor claim; Ingram has not confirmed. No active technical exploitation mentioned.
- Fix
- Not applicable; data leak incident with no fix indicated in the source.
- Vector
- Component and flaw not described in the source. ShinyHunters claims the breach happened in April 2026, with access that reportedly reached SharePoint folders holding photos, videos and PDFs.
- More details
- The group says the full haul is 1.70 GB and this release omits SharePoint folders with photos, videos and PDFs to focus on user records. DailyDarkWeb advises expecting targeted phishing referencing Ingram accounts.
Timeline
Incident opened.
Sources 1 source
- @DailyDarkWeb @DailyDarkWeb
