Inter-Con Security’s Salesforce Data Breach Hit 276,352 Records

In June 2026, Inter-Con Security, a physical security and manned guarding firm operating across the United States, confirmed that 276,352 records had been exfiltrated from its Salesforce CRM. The exposed data covers contacts, sales leads and customers, and includes names, phone numbers and email addresses tied to real people who had dealings with the company.

The records were later distributed through a cybercrime channel as part of a wider campaign targeting Salesforce customers, and HEROIC's scanner is already checking email addresses against this data.

Why This Is Dangerous

A physical security company's contact list is a useful tool for a scammer, since it lets them impersonate Inter-Con Security or one of its clients convincingly, using real names and phone numbers to add credibility to a phishing attempt or a fraudulent call.

What Was Exposed

• Email addresses give attackers a direct channel for phishing messages.
• Usernames can help an attacker guess or target related accounts.
• First and last names allow messages to be personalized, making scams more convincing.
• Phone numbers open the door to targeted calls, texts and voice phishing attempts.

Why This Matters

Because no passwords were part of this exposure, direct account takeover is not the immediate concern. The bigger risk is social engineering, where an attacker uses accurate personal details to convince a target that a call, text or email is legitimate before asking for sensitive information or payment.

How a Database Breach Like This Happens

This exposure did not come from malware on a personal device. It came from Inter-Con Security's own Salesforce environment, part of a broader extortion campaign that has targeted multiple companies' CRM systems, with the stolen data later distributed to other cybercriminals.

Should You Watch for Contact From Inter-Con Security?

Scan your email to see if your address is part of this exposure. If it is, be cautious of unexpected calls or messages referencing this company, and avoid sharing further personal details until you can confirm who you are actually speaking with. This applies whether the contact reaches a personal or a work email.