What Happened
In June 2026, American Tower Corporation (americantower.com), a major U.S. telecommunications infrastructure provider, was hit by a ShinyHunters “pay or leak” ransomware/extortion campaign that led to the theft and publication of personal data on hundreds of thousands of individuals. The incident, discovered and publicly claimed around June 11–12, 2026, involved data allegedly taken from customers, landowners, employees, contractors, and business leads. ShinyHunters initially claimed to have compromised more than 5.2 million records, including extensive PII (names, physical addresses, phone numbers), records tied to other companies (such as T‑Mobile, Verizon, and U.S. DHS), and tower asset records with GPS coordinates and plaintext physical access/gate codes for tower compounds. Subsequent curated breach datasets and monitoring services report on the subset that has been verified and circulated in breach collections: around 217,000–573,000 records, primarily containing email addresses, names, phone numbers, physical addresses, and job titles, with no passwords confirmed as exposed.
