Questel Breaches 1,226,209 Accounts

| 2026-09-01 04:49 CRITICAL LOW DATA BREACH

JSON

Executive Summary

Highlight CTI
AI-generated

In August 2026, the French intellectual property software and services company Questel was targeted by ShinyHunters in a "pay or leak" extortion campaign. The group published an extensive corpus of data allegedly obtained from Questel, comprising corporate contact information associated with sales leads, support cases, and marketing activities, along with 1.2M unique email addresses, names, employers, job titles, physical addresses, and phone numbers. This cyber operation is classified as Extortion, affecting approximately 1,226,209 breached accounts in France, attributed to the APT group ShinyHunters.

Technical Mitigations AI-generated

• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.

Intelligence Metadata

Actors / Malware / CVEs / Campaigns

ShinyHunters

Target & Sectors

Incident Timeline

‎2026/09/01

Threat actors ShinyHunters launched a "pay or leak" extortion campaign against Questel on September 1, 2026.

Click on any entity below to view its context and source!

threat_actor ShinyHunters

What Happened In August 2026, the French intellectual property software and services company Questel was the target of a ShinyHunters "pay or leak" extortion campaign .

Have I Been Pwned

Intelligence Sources

Have I Been Pwned 2026-09-01

Questel - 1,226,209 breached accounts Have I Been Pwned

Contextual Telemetry

Context Block 6 METRICS

tactic Cyber Operation Type

‎Extortion tactic

timeline Temporal Reference

‎August 2026 date

target region Target Country

‎France country

threat actor APT Group

‎ShinyHunters actor

organisation Identified Entity

‎Questel entity

general metric Breached Accounts

1,226,209 breached accounts

Click on any entity below to view its context in the main text!

Unknown Source