The Shell Vendor Leak Exposed 19,726 UK Contact Records

HEROIC analysts identified a dataset tied to Shell, the UK-based multinational oil and gas company, posted for sale on a hacking forum on May 29, 2024. The exposed dataset contains 19,726 records, including email addresses, phone numbers, first names, and last names. A Shell spokesperson stated the data did not come directly from Shell's own systems but from a vendor using a third-party platform.

Why This Is Dangerous

Even though Shell says the data did not come from its own infrastructure, the records are still tied to real people and real contact information that a threat actor is actively trying to sell. Attackers can use a name, email address, and phone number together to send convincing phishing messages that appear to come from Shell or a related service, or to call victims directly using information that makes the approach feel legitimate.

What Was Exposed From This Shell-Linked Leak

• Email addresses
• Phone numbers
• First names
• Last names

Why This Matters

Because no passwords were included in this leak, the immediate risk is not account takeover on Shell's own systems. The bigger risk is that your name, email, and phone number can be combined with information from other breaches to build a fuller profile used for identity theft, financial fraud, or highly targeted phishing campaigns known as spear-phishing.

How This Third-Party Vendor Breach Happened

This incident illustrates a common pattern known as a third-party or supply-chain breach. Rather than attackers compromising Shell's own network, they appear to have accessed data through a vendor that Shell had contracted to handle certain services on a separate platform. Vendors and contractors often hold copies of a company's customer or contact data, and when the vendor's own security is weaker than the parent company's, attackers can steal that data without ever touching the primary organization's systems. The stolen records were then exported and offered for sale on an underground hacking forum.

Check If You Are Affected

If you have ever provided your contact information to Shell or one of its partners, it is worth checking whether your data is part of this leak. HEROIC's free breach scanner checks your email address against a database of more than 400 billion leaked records, including this incident, and tells you immediately if you have been exposed. Run a free scan today to stay ahead of phishing attempts.