Have I Been Pwned says about 436,000 email addresses were in data ShinyHunters published after a 'pay or leak' extortion attempt against Neogen (August 2026); no Neogen statement found
Have I Been Pwned (HIBP) added Neogen on 9 October 2026. HIBP says the food and animal safety organisation was the target of a ShinyHunters 'pay or leak' extortion attempt in August 2026, and that the group later published data it claimed had been obtained from Neogen.
HIBP says the data consisted largely of corporate contact records and included about 436,000 unique email addresses from mailing lists, employee records and other contacts, with names, phone numbers, physical addresses, employers, job titles and salutations.
Cybernews reported on 31 August that ShinyHunters had given Neogen until 1 September to respond and had not then published samples.
No public statement from Neogen was found.
UPDATE 22 Oct 2026: reworded so each claim is attributed to Have I Been Pwned, and removed wording its breach page does not support (source: Have I Been Pwned).
- Product
- Neogen Corporation (food and animal safety) — corporate contact, mailing-list and employee records
- Versions
- n/a — incident
- Exploited in Australia?
- unknown
- Patch to
- Check your work address on Have I Been Pwned. Neogen customers and suppliers: expect convincing phishing and invoice fraud that uses real names, job titles and account contacts, and confirm any change to bank details or orders through a known phone number.