On June 18, 2026, the ransomware group ShinyHunters listed icsecurity.com on its leak site and published more than 2.7 million records of internal corporate data, giving the company until 22 June 2026 to pay or face full public release.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch icsecurity.com
Get alerted the next time icsecurity.com files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about icsecurity.com’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
Reported Details of the Incident
Public reporting on the ransomware.live portal shows ShinyHunters claims to have exfiltrated internal files from icsecurity.com during a ransomware attack. The listing includes a sample of the stolen data and a final warning that payment must be made by 22 June 2026 or the group will leak the remaining information and create additional problems for the victim. The exact number of people whose personal information is contained in the 2.7 million records remains unknown, but the volume suggests customer, employee, or partner data is involved. No independent verification of the dataset has been published, and icsecurity.com has not issued a public statement as of the latest available reporting.
Why This Matters for You and Your Family
When a company that handles identity, security, or personal records is breached, the information stolen can appear in places you cannot easily see. 2.7 million records represent a large pool of names, emails, addresses, phone numbers, or account details that criminals can sell or use themselves. If your data is among them, it can be combined with information from earlier breaches to build a profile that makes identity theft, account takeovers, or targeted scams far easier. For families this risk extends beyond one person: a parent’s email linked to a child’s gaming account can expose the entire household to harassment or financial fraud.
The Doxxing and Identity-Chain Risks
Credential leaks like this one rarely stay isolated. Attackers map connections between an email address found in the icsecurity.com files, usernames on gaming platforms, social-media handles, and phone numbers. Once those links are established, a single exposed password can lead to account takeovers that reveal home addresses, family member names, and photos. Public reporting indicates these chains often end in doxxing campaigns or extortion attempts that feel personal because the attackers already know details about you and your children. Gaming accounts are especially vulnerable because kids frequently reuse passwords or email addresses that appear in adult-oriented breaches.