Have I Been Pwned loads 435,963 email addresses from Neogen data published after a ShinyHunters 'pay or leak' extortion attempt against the food and animal safety company (breach August 2026)
Have I Been Pwned added Neogen on 9 October 2026 (UTC). It says the US food and animal safety company was the target of a ShinyHunters 'pay or leak' extortion attempt in August 2026, after which the group published data it claimed came from Neogen. HIBP counts 435,963 unique email addresses, drawn largely from corporate contact records, mailing lists and employee records, with names, phone numbers, physical addresses, employers, job titles and salutations. HIBP lists the breach as verified. When ShinyHunters made its claim, Cybernews reported on 31 August that the group gave Neogen until 1 September to respond before leaking, and had not then published samples. Neogen makes food safety diagnostics and animal health products used by food producers, processors and agricultural businesses. Neogen has not been quoted on the data. Primary: Have I Been Pwned; background: Cybernews.
- Product
- Neogen Corporation (food and animal safety) — corporate contact, mailing-list and employee records
- Versions
- n/a — incident
- Exploited in Australia?
- unknown
- Patch to
- Check your work address on Have I Been Pwned. Neogen customers and suppliers: expect convincing phishing and invoice fraud that uses real names, job titles and account contacts, and confirm any change to bank details or orders through a known phone number.
Primary: Have I Been Pwned — Neogen breach (added 9 Oct 2026; breach 29 Aug 2026) · Cybernews — ShinyHunters claims breach of food safety giant Neogen (31 Aug 2026)