Crunchbase Data Breach

What happened?

In January 2026, the private company intelligence platform Crunchbase was targeted in a ShinyHunters "pay or leak" extortion attempt . Data allegedly obtained from the company was subsequently published publicly and included 560k unique email addresses, largely belonging to leads and business contacts. Other data included names, physical addresses, phone numbers, job titles, employers and LinkedIn profiles. Crunchbase later confirmed that a threat actor had exfiltrated documents from its corporate network.

When did it happen?

The breach date in the public record is January 22, 2026. The record was added to the catalogue on October 14, 2026 and last updated there on October 14, 2026.

What information was reported as exposed?

• Email addresses
• Employers
• Job titles
• Names
• Phone numbers
• Physical addresses
• Social media profiles

These are incident-level categories. The record does not prove that every category was exposed for every affected person.

Who may be affected?

This record may be relevant to people who had an account or other relationship with Crunchbase or used crunchbase.com around January 22, 2026. A catalogue entry does not establish that every customer was affected or that every listed data category applied to each person. Compare the record with an official notice addressed to you.

What should you do?

Choose actions that match the information involved. If you find signs that someone is using your identity, the Federal Trade Commission provides a personal recovery plan at IdentityTheft.gov.