What was exposed, when it happened, and which databases confirm it.
- accounts
- 396,313
- Breached
- May 29, 2026
- Last Update
- June 5, 2026
Were you caught in this breach?
Search your email, phone number or username against every record CheckLeaked indexes.
Your address never leaves this page: it is hashed in your browser and only a short fragment of that hash is sent.
What happened
In May 2026, the corporate travel management company BCD Travel was claimed as a victim of the ShinyHunters "pay or leak" extortion campaign. Data allegedly obtained from BCD was subsequently published publicly in early June and contained 396k unique email addresses. Other exposed data included names, addresses, phone numbers, job titles and employer names, spanning a variety of different data sets including leads, internal staff and support tickets.
Compromised Info
- Email addresses
- Employers
- Job titles
- Names
- Phone numbers
- Physical addresses
- Support tickets
Attestation
Four independent databases catalog this breach and they do not always agree. Each lane below is one source’s own count.
Sources & Link Methods
- LeakCheck— linked via automatic string matching
- HIBP
FAQ
What was leaked in the BCDTravel breach?
The BCDTravel breach exposed: Email addresses, Employers, Job titles, Names, Phone numbers, Physical addresses, and Support tickets.
When did the BCDTravel breach happen?
The BCDTravel breach was disclosed on May 29, 2026 and affected 396,313 records.
Am I affected by the BCDTravel breach?
Search your email, phone or username at checkleaked.cc to find out whether your data appears in the BCDTravel leak.