Brinks Home has confirmed that hackers accessed parts of its IT environment, potentially impacting over one million customers across North America. The company is currently investigating the extent of the breach, which was discovered on July 20, 2026. While Brinks Home states that its alarm monitoring and security systems continue to function normally, an extortion group known as ShinyHunters has claimed responsibility for the attack.
The group alleges it stole more than 4.9 million records from Brinks Home's Salesforce environment. These claims include over 1.1 million rows from a customer contacts database and approximately 3.8 million customer support chat logs. ShinyHunters also claims to have obtained over 4,000 employee records containing names, email addresses, job titles, and phone numbers. Brinks Home has not independently verified these figures or confirmed if personal information was compromised.
According to ShinyHunters, the intrusion was facilitated by a Microsoft Entra voice phishing, or vishing, attack on July 13, 2026. In such attacks, a criminal impersonates a technology department employee to trick an individual into approving an account access or device registration, potentially granting the hacker entry into business systems.
Customer support chat logs, if stolen, could provide attackers with personal details such as installation dates, billing issues, equipment information, and authorized user names. This information can be used to craft convincing phishing scams, making fraudulent calls or messages appear legitimate by referencing specific customer service interactions. The FBI has previously warned that criminals use stolen context to create highly effective phishing campaigns.
Brinks Home has cautioned its customers to be vigilant against suspicious communications that may arise from the breach. Scammers could pose as company representatives or cybersecurity investigators, potentially threatening data release unless immediate action is taken, such as visiting a fake login page or confirming account credentials. The company advises that it will not request sensitive information via unsolicited communications.
As of the latest updates, Brinks Home had not publicly confirmed the release of any customer data, though the hackers' deadline of July 30, 2026, has passed. The company has engaged external cybersecurity experts to assist with its ongoing investigation, which is still in its early stages. Brinks Home has stated it will notify affected individuals if the investigation confirms that personally identifiable information was involved.
Customers are advised to take several precautionary measures. These include being wary of unexpected communications, verifying urgent requests through official channels like the Brinks Home app or website, and never sharing authentication codes or approving unfamiliar login notifications. Strengthening Brinks Home passwords, using multifactor authentication where available, and reviewing account credentials for any unfamiliar activity are also recommended.
Additionally, securing mobile carrier accounts with a PIN and port-out lock can help prevent SIM swap scams. While Brinks Home has not confirmed the exposure of Social Security numbers or financial account details, customers are encouraged to monitor their bank statements, credit card activity, and credit reports for any suspicious activity. A credit freeze with the major credit bureaus may be considered if sensitive identity information is confirmed to be compromised.
Brinks Home plans to provide further updates as verified findings become available from its investigation. The company has emphasized its commitment to data security and customer privacy during this process.