Brinks Home, a major provider of physical security systems for homes and businesses, has acknowledged unauthorized access to a portion of its IT infrastructure. While the company has not identified the perpetrator or the specific systems affected, the ShinyHunters group has publicly claimed responsibility for the intrusion, stating they exfiltrated over 4.9 million records from Brinks Home's Salesforce instance.
The company confirmed that the responsible party has threatened to leak information it claims to possess. Brinks Home stated it is actively working to determine precisely what information was compromised and which individuals may be impacted. Should personal information be found to have been affected, the company committed to notifying those individuals as required.
According to Brinks Home, its products and services, such as alarms and other security tools, are believed to be functioning normally and were not directly affected by the incident.
ShinyHunters, a group known for similar attacks, claimed to have obtained the Salesforce records, which reportedly contain personally identifiable information (PII). The group issued a threat to leak the data and cause "several annoying digital problems" if Brinks Home did not initiate negotiations for a ransom payment by Thursday, July 30. It remains unconfirmed whether Brinks Home has engaged with ShinyHunters.
This incident follows a pattern of activity by ShinyHunters, which earlier this year claimed to have stolen data from approximately 100 high-profile companies' Salesforce instances. Salesforce itself has previously issued warnings about an unnamed threat actor group actively scanning for publicly accessible Salesforce instances and exploiting misconfigured guest accounts to gain unauthorized access.
Brinks Home operates independently from The Brinks Company, which sold its home security division in 2010. Brinks Home's parent company, Monitronics, has undergone bankruptcy proceedings twice since 2019.
