What was exposed, when it happened, and which databases confirm it.
- accounts
- 1,273,310
- Breached
- April 14, 2026
- Last Update
- May 14, 2026
Were you caught in this breach?
Search your email, phone number or username against every record CheckLeaked indexes.
Your address never leaves this page: it is hashed in your browser and only a short fragment of that hash is sent.
What happened
In April 2026, the fintech software company Abrigo was targeted in a "pay or leak" extortion attempt by the ShinyHunters group. Shortly after, data allegedly taken from the company's Salesforce instance was published publicly and contained over 700k unique email addresses belonging to both Abrigo staff and external contacts. Whilst separate from Abrigo's Salesforce compromise via the Drift application connector the previous year, the data fields described in that incident are consistent with the ShinyHunters data, namely that it was "business contact information" including "institution name, employee name, email addresses, and phone numbers".
Compromised Info
- Email addresses
- Employers
- Job titles
- Names
- Phone numbers
- Physical addresses
Attestation
Four independent databases catalog this breach and they do not always agree. Each lane below is one source’s own count.
Sources & Link Methods
- LeakCheck— linked via automatic string matching
- HIBP
FAQ
What was leaked in the Abrigo breach?
The Abrigo breach exposed: Email addresses, Employers, Job titles, Names, Phone numbers, and Physical addresses.
When did the Abrigo breach happen?
The Abrigo breach was disclosed on April 14, 2026 and affected 1,273,310 records.
Am I affected by the Abrigo breach?
Search your email, phone or username at checkleaked.cc to find out whether your data appears in the Abrigo leak.