Data breach
BCD Travelbcdtravel.com
396 313 accounts exposed in a breach dated 2026-05-29.
Breached2026-05-29Added to HIBP2026-06-05 UTCUpdated by HIBP2026-06-05 UTCAccounts396 313Domainbcdtravel.com
Verified
What happened in Have I Been Pwned’s words
In May 2026, the corporate travel management company BCD Travel was claimed as a victim of the ShinyHunters "pay or leak" extortion campaign. Data allegedly obtained from BCD was subsequently published publicly in early June and contained 396k unique email addresses. Other exposed data included names, addresses, phone numbers, job titles and employer names, spanning a variety of different data sets including leads, internal staff and support tickets.
Exposed data as HIBP classifies it
- Email addresses
- Employers
- Job titles
- Names
- Phone numbers
- Physical addresses
- Support tickets
How HIBP qualifies it
- HIBP verified that the data came from this service.
Our report on bcdtravel.com
Source: Have I Been Pwned (CC BY 4.0)
Copied from HIBP 2026-11-05 03:50 UTC