--- title: "Brinks Home unauthorized-access data incident" description: "Evidence-backed account of Brinks Home unauthorized-access data incident, covering what happened, impact, timeline, attack vector, technical details, and primary sources." incident_type: "Data incident" status: "active" last_modified: "2026-08-09" canonical_url: "https://www.ally.security/incidents/brinks-home-unauthorized-access-data-incident-2026" markdown_url: "https://www.ally.security/incidents/brinks-home-unauthorized-access-data-incident-2026.md" stix_url: "https://www.ally.security/incidents/brinks-home-unauthorized-access-data-incident-2026/stix.json" --- # Brinks Home unauthorized-access data incident Brinks Home confirmed that an unauthorized party accessed certain company systems and said its investigation remained in progress. HIBP cataloged a verified corpus associated with the incident while Brinks Home continued determining what information and people were involved. Last modified Aug 9, 2026 · 3 sources ## Summary - **Environment:** Not publicly identified - **Operational impact:** No outage or recovery duration quantified - **Financial impact:** No public cost estimate ## What happened [Brinks Home](https://brinkshome.com/) confirmed that an unauthorized party accessed certain company systems and said its investigation remained in progress. [1](#source-1) ## Impact HIBP cataloged a verified corpus associated with the incident while Brinks Home continued determining what information and people were involved. [1](#source-1) Documented data types include: - Contact information — Email addresses, phone numbers, and physical addresses listed for the HIBP corpus; the organization had not publicly confirmed individual-level scope. [3](#source-3) - Names — Names listed for the HIBP corpus; the organization had not publicly confirmed individual-level scope. [3](#source-3) - Payment card information — HIBP lists partial credit-card data and describes last four digits, card type, and expiry; this claim does not assert full card numbers. [3](#source-3) - Purchase history — Purchases listed for the HIBP corpus; the organization had not publicly confirmed individual-level scope. [3](#source-3) - Dates of birth — Dates of birth listed for the HIBP corpus; the organization had not publicly confirmed individual-level scope. [3](#source-3) A cited record reports 732,162 records (Unique email addresses represented in the HIBP incident corpus; not a Brinks Home-confirmed number of affected people, customers, employees, or leads; as of 2026-08-08). [1](#source-1) ## Timeline ### July 13, 2026 — Documented event HIBP BreachDate. Brinks Home's undated public update confirms the incident but does not establish the event date. [3](#source-3) ### August 9, 2026 — Briefing updated This briefing was last reviewed and updated on August 9, 2026. ## Threat Group & Attack Vector Brinks Home advised customers to distrust unsolicited communications requesting personal information or account credentials and to verify messages using official contact information. [1](#source-1) [3](#source-3) ### Actors - No threat actor group has been identified in the reviewed public evidence. ### TTPs - No specific MITRE ATT\&CK technique is currently mapped for this case. ## Response Brinks Home activated its incident-response procedures, took steps to contain the incident, and continued monitoring its systems. At the public FAQ's evidence cutoff, Brinks Home was still determining exactly what information was involved and whose information it was. Brinks Home said its investigation was ongoing and it could not yet confirm how the incident happened. Brinks Home engaged outside cybersecurity experts to investigate the incident and review the information involved. The responsible party threatened to release information it claimed to have taken, and Brinks Home said it was aware such material might be posted publicly. Brinks Home said it would provide additional notifications consistent with applicable law if it determined that personally identifiable information was involved. An unauthorized party gained access to certain Brinks Home company systems. Brinks Home said the incident did not affect production or customer-facing services and that alarm monitoring and system functionality continued without interruption. No access path, attribution, scale, or recovery detail is inferred beyond the cited claims. [1](#source-1) [2](#source-2) ## Assets [Download the case-scoped STIX 2.1 bundle]() ## Sources Primary source records used to research this incident. ### An Important Cybersecurity Update from Brinks Home official · Brinks Home ### Brinks Home Cybersecurity Investigation: Frequently Asked Questions official · Brinks Home ### Brinks Home breach record advisory · Have I Been Pwned · Aug 8, 2026
Evidence ledger Review the supporting structured claims. 1. **Resulted In · 90% confidence · current** July 2026 Brinks Home unauthorized-access incident: Brinks Home personal-data corpus 2. **Exposed Data Category · 90% confidence · current** Brinks Home personal-data corpus: Contact information 3. **Resulted In · 100% confidence · current** July 2026 Brinks Home unauthorized-access incident: Brinks Home activated its incident-response procedures, took steps to contain the incident, and continued monitoring its systems. 4. **Exposed Data Category · 90% confidence · current** Brinks Home personal-data corpus: Names 5. **Resulted In · 100% confidence · current** Brinks Home personal-data corpus: At the public FAQ's evidence cutoff, Brinks Home was still determining exactly what information was involved and whose information it was. 6. **Occurred At · 80% confidence · current** July 2026 Brinks Home unauthorized-access incident: 2026-07-13 7. **Resulted In · 100% confidence · current** Brinks Home public incident update: Brinks Home advised customers to distrust unsolicited communications requesting personal information or account credentials and to verify messages using official contact information. 8. **Resulted In · 100% confidence · current** July 2026 Brinks Home unauthorized-access incident: Brinks Home said its investigation was ongoing and it could not yet confirm how the incident happened. 9. **Exposed Data Category · 90% confidence · current** Brinks Home personal-data corpus: Payment card information 10. **Resulted In · 100% confidence · current** July 2026 Brinks Home unauthorized-access incident: Brinks Home engaged outside cybersecurity experts to investigate the incident and review the information involved. 11. **Resulted In · 100% confidence · current** July 2026 Brinks Home unauthorized-access incident: The responsible party threatened to release information it claimed to have taken, and Brinks Home said it was aware such material might be posted publicly. 12. **Exposed Data Category · 90% confidence · current** Brinks Home personal-data corpus: Purchase history 13. **Resulted In · 100% confidence · current** Brinks Home public incident update: Brinks Home said it would provide additional notifications consistent with applicable law if it determined that personally identifiable information was involved. 14. **Resulted In · 100% confidence · current** July 2026 Brinks Home unauthorized-access incident: An unauthorized party gained access to certain Brinks Home company systems. 15. **Exposed Data Category · 90% confidence · current** Brinks Home personal-data corpus: Dates of birth 16. **Affected Organization · 100% confidence · current** July 2026 Brinks Home unauthorized-access incident: Brinks Home 17. **Exposed Record Count · 100% confidence · current** Brinks Home personal-data corpus: 732,162 record 18. **Resulted In · 100% confidence · current** July 2026 Brinks Home unauthorized-access incident: Brinks Home said the incident did not affect production or customer-facing services and that alarm monitoring and system functionality continued without interruption.