Brinks Home has disclosed unauthorised access to part of its IT systems after ShinyHunters claimed to have stolen data from its Salesforce environment. The incident matters because the company provides home and business security services, although it says its products and alarm services are currently operating normally.

ShinyHunters says it obtained more than 4.9 million Salesforce records containing some personal information and threatened to leak them unless Brinks Home negotiated a ransom by 30 July. Brinks Home has not confirmed the attacker, system or data involved, and says it is assessing who may be affected and will notify individuals where required. The group has recently claimed breaches involving around 100 prominent companies’ Salesforce systems, with Salesforce previously warning of attacks exploiting misconfigured guest accounts.