CyrusOne Data Breach

What happened?

In August 2026, data centre operator CyrusOne was the target of a ShinyHunters "pay or leak" extortion attempt . The group subsequently published data allegedly obtained from the company, which included 373k unique email addresses across records relating to users, sales leads and CyrusOne employees. The data largely consisted of corporate contact information, including names, physical addresses, phone numbers and job titles. It also included support tickets and other information related to the organisation's operations.

When did it happen?

The breach date in the public record is August 5, 2026. The record was added to the catalogue on October 7, 2026 and last updated there on October 7, 2026.

What information was reported as exposed?

• Email addresses
• Employers
• Job titles
• Names
• Phone numbers
• Physical addresses
• Support tickets

These are incident-level categories. The record does not prove that every category was exposed for every affected person.

Who may be affected?

This record may be relevant to people who had an account or other relationship with CyrusOne or used cyrusone.com around August 5, 2026. A catalogue entry does not establish that every customer was affected or that every listed data category applied to each person. Compare the record with an official notice addressed to you.

What should you do?

Choose actions that match the information involved. If you find signs that someone is using your identity, the Federal Trade Commission provides a personal recovery plan at IdentityTheft.gov.