{
  "schemaVersion": 1,
  "incident": {
    "id": "breach-cyrusone-a7cc5b1e32659aaf7a1c33995793ee47",
    "url": "https://cveboard.org/i/breach-cyrusone-a7cc5b1e32659aaf7a1c33995793ee47",
    "urlPt": "https://cveboard.org/pt/i/breach-cyrusone-a7cc5b1e32659aaf7a1c33995793ee47",
    "json": "https://cveboard.org/i/breach-cyrusone-a7cc5b1e32659aaf7a1c33995793ee47.json",
    "kind": "breach",
    "live": false,
    "knownExploited": false,
    "severity": null,
    "title": "CyrusOne data breach",
    "summary": "In August 2026, data centre operator CyrusOne was the target of a ShinyHunters \"pay or leak\" extortion attempt. The group subsequently published data allegedly obtained from the company, which included 373k unique email addresses across records relating to users, sales leads and CyrusOne employees. The data largely consisted of corporate contact information, including names, physical addresses, phone numbers and job titles. It also included support tickets and other information related to the organisation's operations.",
    "titlePt": "Vazamento de dados da CyrusOne",
    "summaryPt": "Em agosto de 2026, a operadora de centros de dados CyrusOne foi alvo de uma tentativa de extorsão \"pague ou vazamos\" do grupo ShinyHunters. O grupo publicou posteriormente dados alegadamente obtidos da empresa, que incluíam 373k endereços de e-mail únicos em registros relacionados a usuários, leads de vendas e funcionários da CyrusOne. Os dados consistiam principalmente em informações de contato corporativo, incluindo nomes, endereços físicos, números de telefone e cargos. Eles também incluíam tickets de suporte e outras informações relacionadas às operações da organização.",
    "cves": [],
    "ghsa": null,
    "cvss": null,
    "epss": null,
    "packages": [],
    "vendor": "CyrusOne",
    "product": null,
    "kev": null,
    "breach": {
      "domain": "cyrusone.com",
      "breachDate": "2026-08-05",
      "pwnCount": 373460,
      "dataClasses": [
        "Email addresses",
        "Employers",
        "Job titles",
        "Names",
        "Phone numbers",
        "Physical addresses",
        "Support tickets"
      ],
      "verified": true,
      "stealerLog": false,
      "malware": false
    },
    "retracted": false,
    "sources": [
      {
        "label": "Have I Been Pwned",
        "url": "https://haveibeenpwned.com/Breach/CyrusOne"
      }
    ],
    "publishedAt": "2026-10-07T23:19:16.000Z",
    "updatedAt": "2026-10-07T23:19:16.000Z"
  },
  "live": false,
  "events": [
    {
      "id": "hibp:CyrusOne:hibp_added:2026-10-07T23:19:16.000Z",
      "incidentId": "breach-cyrusone-a7cc5b1e32659aaf7a1c33995793ee47",
      "type": "hibp_added",
      "at": "2026-10-07T23:19:16.000Z",
      "detail": {
        "pwnCount": 373460,
        "breachDate": "2026-08-05"
      }
    }
  ]
}