Have I Been Pwned (HIBP) added CyrusOne on 7 October 2026. HIBP says the data centre operator was the target of a ShinyHunters 'pay or leak' extortion attempt in August 2026, and that the group then published data allegedly obtained from the company, including about 373,500 unique email addresses across records relating to users, sales leads and CyrusOne employees.

HIBP says the data was largely corporate contact information (names, physical addresses, phone numbers, employers and job titles) and also included support tickets and other information about the company's operations.

When ShinyHunters first made its claim in August, Cybernews reported that the group said it held 12.9 million Salesforce records, demanded US$13 million and listed floor plans, electrical diagrams and access-control records among the data; those are ShinyHunters' claims, and HIBP's description does not mention facility documents.

CyrusOne had not commented publicly at the time of Cybernews' report, and no public statement from CyrusOne was found.

UPDATE 22 Oct 2026: reworded so each claim is attributed to Have I Been Pwned, and removed wording its breach page does not support (source: Have I Been Pwned).