ZenBusiness

DISCLOSED 2026-03-27 · STOLEN CREDS · 5,118,184 RECORDS EXPOSED

In March 2026, the hacker and extortion group "ShinyHunters" claimed to have obtained a substantial corpus of data from ZenBusiness, a business formation and compliance platform. The group claimed the data had been exfiltrated from platforms including Snowflake, Mixpanel and Salesforce, and threatened to publish it if a ransom was not paid. The following month, after...

The record

What we know

Disclosed

2026-03-27

Attack vector

Stolen Creds

Records exposed

5,118,184

Domain

zenbusiness.com

Data classes exposed

Email addressesNamesPhone numbers

Sources

Cited reporting

↗ Have I Been Pwned (2026-05-02)

Similar vector · recent

Other stolen creds breaches on file

This page is the permanent ColdRecon entry for the ZenBusiness disclosure. It updates if new public reporting emerges. All tracked breaches →

ZenBusiness just lived through this. Your next prospect doesn't have to.

ColdRecon turns every disclosed breach into a daily intelligence brief from the seller's seat — normalized to the factors that move a deal, written in the Handler's voice. Request clearance and the first lands tomorrow at 0600.

Request Clearance →