Have I Been Pwned claims Pitney Bowes hit by 8.2M email address leak
(2026/04/28)
- Reference: 1777385707
- News link: https://www.theregister.co.uk/2026/04/28/pitney_bowes_is_the_latest/
- Source link:
Logistics technology company Pitney Bowes, which makes franking machines for US postage, is the latest scalp claimed by ShinyHunters and its ongoing spree of pay-or-leak attacks against major organizations.
Data breach tracker Have I Been Pwned (HIBP) [1]confirmed the breach on April 27, with 8.2 million unique email addresses included in the dump alongside names, phone numbers, and physical addresses. A smaller subset of the entire data trove pertained to company employment records, which included job titles.
Murder, she wrote: Ex-FBI chief wants some ransomware crims charged with homicide [2]READ MORE
The Register contacted Pitney Bowes for more information. Attempts to reach its press-specific email addresses led to bouncebacks. Its investor relations contact is active, but did not immediately respond to our request.
Pitney Bowes may not be a household name, but it's a substantial US-based tech firm producing shipping software and mailing technologies used in everyday shipping centers. The company claims more than 600,000 clients worldwide and posted $1.9 billion in revenue in 2025.
ShinyHunters has been on a tear in recent weeks, with HIBP tracking and verifying the group's claims as they land.
[3]
Confirmed cases include Grand Theft Auto developer [4]Rockstar Games and physical security giant [5]ADT , while the list of companies it claims to have attacked is considerably longer.
[6]
[7]
In just the past week, the cybercrime collective has claimed responsibility for attacks on the likes of Udemy, [8]Carnival Cruises , and the Asian Football Confederation, allegedly leaking tens of thousands of professional footballers' personal information and document scans.
The Register asked the Asian Football Confederation for comment yesterday, though it has yet to respond.
[9]Two different attackers poisoned popular open source tools - and showed us the future of supply chain compromise
[10]US cybercrime losses pass $20B for first time as AI boosts online fraud
[11]Researchers didn't want to glamorize cybercrims. So they roasted them
[12]Jaguar Land Rover's cyber bailout sets worrying precedent, watchdog warns
Prior to the latest wave of breaches, ShinyHunters was also behind the attacks on Match Group and Dutch telco Odido.
The group also told The Register in March that it accessed the data belonging to [13]nearly 400 companies via a Salesforce breach.
[14]
Some of you may remember that ShinyHunters was also (partly) behind the sprawling attacks on [15]Salesloft Drift last year – as it worked in tandem with other crime crews as Scattered Lapsus$ Hunters – and [16]hundreds more Salesforce customers later in 2025. ®
Get our [17]Tech Resources
[1] https://haveibeenpwned.com/Breach/PitneyBowes
[2] https://www.theregister.com/2026/04/21/exfbi_cyber_chief_urges_felony_charges_ransomware/
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2afDZo551AeO1IngvtMYgOwAAAAI&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[4] https://www.theregister.com/2026/04/13/shinyhunters_rockstar_breach/
[5] https://www.theregister.com/2026/04/27/home_security_giant_adt_gets/
[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44afDZo551AeO1IngvtMYgOwAAAAI&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33afDZo551AeO1IngvtMYgOwAAAAI&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[8] https://www.theregister.com/2026/04/24/shinyhunters_claim_cruise_giant_carnivals/
[9] https://www.theregister.com/2026/04/11/trivy_axios_supply_chain_attacks/
[10] https://www.theregister.com/2026/04/07/cybercrime_losses_reach_alltime_high/
[11] https://www.theregister.com/2026/04/05/trellix_john_fokker_roasting_crims/
[12] https://www.theregister.com/2026/03/20/jlr_bailout_cmc/
[13] https://www.theregister.com/2026/03/09/shinyhunters_claims_more_highprofile_victims/
[14] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44afDZo551AeO1IngvtMYgOwAAAAI&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[15] https://www.theregister.com/2025/08/27/salesforce_salesloft_breach/
[16] https://www.theregister.com/2025/11/21/shinyhunters_salesforce_gainsight_breach/
[17] https://whitepapers.theregister.com/
Data breach tracker Have I Been Pwned (HIBP) [1]confirmed the breach on April 27, with 8.2 million unique email addresses included in the dump alongside names, phone numbers, and physical addresses. A smaller subset of the entire data trove pertained to company employment records, which included job titles.
Murder, she wrote: Ex-FBI chief wants some ransomware crims charged with homicide [2]READ MORE
The Register contacted Pitney Bowes for more information. Attempts to reach its press-specific email addresses led to bouncebacks. Its investor relations contact is active, but did not immediately respond to our request.
Pitney Bowes may not be a household name, but it's a substantial US-based tech firm producing shipping software and mailing technologies used in everyday shipping centers. The company claims more than 600,000 clients worldwide and posted $1.9 billion in revenue in 2025.
ShinyHunters has been on a tear in recent weeks, with HIBP tracking and verifying the group's claims as they land.
[3]
Confirmed cases include Grand Theft Auto developer [4]Rockstar Games and physical security giant [5]ADT , while the list of companies it claims to have attacked is considerably longer.
[6]
[7]
In just the past week, the cybercrime collective has claimed responsibility for attacks on the likes of Udemy, [8]Carnival Cruises , and the Asian Football Confederation, allegedly leaking tens of thousands of professional footballers' personal information and document scans.
The Register asked the Asian Football Confederation for comment yesterday, though it has yet to respond.
[9]Two different attackers poisoned popular open source tools - and showed us the future of supply chain compromise
[10]US cybercrime losses pass $20B for first time as AI boosts online fraud
[11]Researchers didn't want to glamorize cybercrims. So they roasted them
[12]Jaguar Land Rover's cyber bailout sets worrying precedent, watchdog warns
Prior to the latest wave of breaches, ShinyHunters was also behind the attacks on Match Group and Dutch telco Odido.
The group also told The Register in March that it accessed the data belonging to [13]nearly 400 companies via a Salesforce breach.
[14]
Some of you may remember that ShinyHunters was also (partly) behind the sprawling attacks on [15]Salesloft Drift last year – as it worked in tandem with other crime crews as Scattered Lapsus$ Hunters – and [16]hundreds more Salesforce customers later in 2025. ®
Get our [17]Tech Resources
[1] https://haveibeenpwned.com/Breach/PitneyBowes
[2] https://www.theregister.com/2026/04/21/exfbi_cyber_chief_urges_felony_charges_ransomware/
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2afDZo551AeO1IngvtMYgOwAAAAI&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[4] https://www.theregister.com/2026/04/13/shinyhunters_rockstar_breach/
[5] https://www.theregister.com/2026/04/27/home_security_giant_adt_gets/
[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44afDZo551AeO1IngvtMYgOwAAAAI&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33afDZo551AeO1IngvtMYgOwAAAAI&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[8] https://www.theregister.com/2026/04/24/shinyhunters_claim_cruise_giant_carnivals/
[9] https://www.theregister.com/2026/04/11/trivy_axios_supply_chain_attacks/
[10] https://www.theregister.com/2026/04/07/cybercrime_losses_reach_alltime_high/
[11] https://www.theregister.com/2026/04/05/trellix_john_fokker_roasting_crims/
[12] https://www.theregister.com/2026/03/20/jlr_bailout_cmc/
[13] https://www.theregister.com/2026/03/09/shinyhunters_claims_more_highprofile_victims/
[14] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44afDZo551AeO1IngvtMYgOwAAAAI&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[15] https://www.theregister.com/2025/08/27/salesforce_salesloft_breach/
[16] https://www.theregister.com/2025/11/21/shinyhunters_salesforce_gainsight_breach/
[17] https://whitepapers.theregister.com/
The 8.2M customers were already pwned...
...when they signed up with Pitney Bowes.
One of the absolutely most miserably incompetent and bureaucratic vendors I've ever had to deal with.