Ransomware Leak
shinyhunters
Baxter International, Inc.
Data leak attributed to shinyhunters, first discovered on 2026-08-14. Approximately 7,448,037 records were reported exposed.
Threat group
shinyhunters
Records exposed
7,448,037
Discovered
2026-08-14
Country
US
Indexed
2026-09-28
Website
baxter.com
Source ID
31678
About this leak
Over 7.1M Salesforce records containing some PII was compromised. This is a final warning to reach out by 17 Aug 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 14 Aug 2026 | Warning: FINAL WARNING PAY OR LEAK
What is inside this leak sample
Indexed records
7,448,037
With email
•••
ID documents
•••
File types
•••
Corporate vs personal email
69.07% corporate · 30.93% personal
Top corporate email domains
% of corporate emails
baxter.com
46.25%
gmail.com.baxinactive
4.22%
6 more hidden ·
Enterprise
File types present
csv
•••
json
•••
Analysed 2026-09-29
More leaks attributed to shinyhunters
Worried your information is in this or another leak?
Run a free, anonymous search
across millions of ransomware and stealer log records.