The most famous brand in physical security got pwned by ShinyHunters

Brinks Home, a prestigious brand in home and business physical security, recently disclosed an unauthorized access to a portion of its IT systems. The alleged intrusion, as claimed by the group ShinyHunters, sought to steal millions of records from the security provider's Salesforce instance. Brinks Home has not identified the intruder or the affected system but confirmed that the responsible party has threatened to leak stolen information.

The company stated it is diligently investigating the extent of the data involved and the individuals affected. Brinks Home products and services, as far as the company knows, remain unaffected, so alarms and other security tools should function without issues.

ShinyHunters, known for numerous Salesforce breaches, publicized that they claimed to have obtained over 4.9 million Salesforce records from Brinks Home, including some personal identifiable information (PII). They warned that they would leak the data and cause digital disruptions unless Brinks Home contacted them by July 30 to negotiate a ransom payment.

It remains unclear whether Brinks Home has reached out to ShinyHunters; their attempts to communicate have been unsuccessful. ShinyHunters has been actively targeting Salesforce instances, claiming to have stolen data from numerous high-profile companies. Salesforce has previously cautioned about an unidentified threat actor actively scanning for public-facing Salesforce instances and exploiting misconfigured guest accounts to infiltrate systems.

Brinks Home is no longer part of the larger Brinks brand, having been sold by The Brinks Company in 2010. Monitronics, the parent company of Brinks Home, has filed for bankruptcy twice since 2019, raising concerns about the quality of its physical security services.