Questel - 1,226,209 breached accounts
Brief
In August 2026, the French intellectual property software and services company Questel was the target of a ShinyHunters "pay or leak" extortion campaign . The group subsequently published an extensive corpus of data they alleged was obtained from the company, largely comprising corporate contact information associated with sales leads, support cases and marketing activities, with 1. 2M unique email addresses.
The data also included names, employers and job titles, along with physical addresses and phone numbers.