Canada Life ShinyHunters Breach: 237K Emails in Public Leak

Canada Life's April disclosure of its ShinyHunters cyber incident said around 70,000 customers were affected — less than half a percent of its 14 million customer base. Last week, the leak hit Have I Been Pwned. The indexed dataset shows more than 237,000 unique email addresses, plus names, phone numbers, home addresses, and in some cases customer support tickets. According to Canada Life's own disclosure, a single employee's account was compromised, and ShinyHunters used it to reach the company's Salesforce environment before exfiltrating customer records. This is part of ShinyHunters' Salesforce-targeting campaign, which has put dozens of companies on their leak site over the past year. ShinyHunters' own claim is 5.6 million records — Canada Life has not confirmed that number. What is verifiable right now is what is already in the public index: more than three times what was disclosed in April. Canada Life has warned customers about phishing in the wake of the leak; go to canadalife.com directly and don't click links in emails claiming to be a breach notice. Sources: https://haveibeenpwned.com/Breach/CanadaLife https://www.canadalife.com/about-us/news-highlights/news/canada-life-recently-identified-a-cyber-incident.html https://www.theglobeandmail.com/business/article-hackers-personal-information-70000-people-canada-life-data-breach/ More on cybersecurity, privacy, scams, and homelab on Hake Hardware. New shorts every weekday. #cybersecurity #shinyhunters #databreach