Fluke Data Breach (July 2026)

What Happened

Per the Have I Been Pwned entry, Fluke was targeted in July 2026 in a ShinyHunters pay or leak extortion campaign, and the group went on to publish more than 100GB of data it said had been taken from the company. Have I Been Pwned describes that corpus as largely corporate contact information, including over 800,000 unique email addresses along with names, phone numbers and physical addresses, plus a large collection of support cases.

SOCRadar's threat intelligence report, published on July 1, 2026, records Fluke Corporation appearing on the ShinyHunters extortion portal that day. The report notes that the group's operations have historically centered on SaaS tenant credential abuse and social engineering, but it stops short of attributing this listing to any method, and it cautions that entries on extortion sites cannot always be independently verified.

Have I Been Pwned loaded the verified breach on July 15, 2026 with a count of 821,100 records. Neither the Have I Been Pwned entry nor the SOCRadar report cites a public statement from Fluke confirming or disputing the claim. No source reviewed here states how the data was obtained, when any access began, or whether individual notifications have gone out.

What Was Exposed

6 classes of data across 821,100 records, per Have I Been Pwned, Fluke breach entry: email addresses, employers, job titles, names, physical addresses and support tickets.

Names, employers, job titles, work email addresses and support ticket history in one record give an attacker everything needed to write a convincing vendor or support follow up to a named person at a named company.

What to Do If You Are Affected

The full sequence, and what to do in what order, is in what to do after a data breach.

What Is Not Known Yet

Fluke has not publicly confirmed or disputed the leak in any source reviewed here. Nobody has said how the data was taken, over what period, or whether the people in the corpus are being notified individually.