CFGI — data breach (CFGI)

Domain: cfgi.com · Accounts affected: 248,235 · Data exposed: Email addresses, Employers, Job titles, Names, Phone numbers, Physical addresses · Verified breach — In March 2026, the financial consulting and advisory firm CFGI was the target of a ShinyHunters "pay-or-leak" extortion campaign. The group subsequently publicised data allegedly obtained from CFGI comprising corporate contact information, including 243k unique email addresses, names, phone numbers and physical addresses.