Inter-Con Security Systems, a Pasadena, California-based private security firm, was hit by a ransomware attack on June 5, 2026. A threat actor calling itself ShinyHunters has claimed responsibility.
Inter-Con Security’s Data Breach Investigation
Inter-Con Security Systems Inc. is a multinational private security company headquartered in Pasadena, California, providing security services and risk management to government agencies, private businesses, and individuals both domestically and internationally. According to public reporting, Inter-Con experienced a ransomware attack on June 5, 2026. On June 18, 2026, a threat actor identifying itself as ShinyHunters posted claims on the dark web asserting it had successfully breached Inter-Con’s data.
As of this writing, Inter-Con has not publicly detailed the steps it has taken in response, including whether it has completed a forensic investigation into the scope of the incident or engaged law enforcement. The company disclosed the incident to the Indiana Attorney General’s office on June 23, 2026, a step required under that state’s breach notification law when residents may be affected, though this does not necessarily indicate the geographic scope of the breach was limited to Indiana.
Specific categories of data exposed in this incident have not been confirmed by Inter-Con. Some data breach trackers list a generic set of commonly-affected categories — such as names, Social Security numbers, dates of birth, addresses, government-issued ID numbers, medical information, and financial information — as possibilities when a company handles sensitive personal data, but these are general industry categories, not a confirmed disclosure from Inter-Con about what was actually taken in this incident.
Security firms like Inter-Con are attractive ransomware targets precisely because they often hold sensitive personal data on employees, contractors, and the clients whose facilities or personnel they protect, including background-check-related information. When threat actor groups claim credit for an attack before the targeted company confirms details, it is common for the confirmed facts to lag public claims by weeks or months while forensic review is underway.
Until Inter-Con releases a formal notification describing exactly which data types were affected and how many individuals are impacted, the full scope of this incident remains unconfirmed. Individuals who do business with, work for, or have been screened by Inter-Con should watch for an official notification letter.
When Did This Breach Occur?
The ransomware attack reportedly occurred on June 5, 2026. The threat actor ShinyHunters posted claims about the breach on June 18, 2026, and Inter-Con disclosed the incident to the Indiana Attorney General on June 23, 2026.
What Information Was Breached?
Inter-Con has not publicly confirmed which specific categories of information were compromised. As of this writing, the affected information types have not been disclosed by the company.
What You Can Do
If you have a relationship with Inter-Con Security Systems, as an employee, contractor, client, or someone who underwent a background check through the company, watch for an official notification letter. Until specifics are confirmed, it’s wise to monitor your financial accounts and credit reports for unusual activity, and consider placing a fraud alert or credit freeze with the major credit bureaus as a precaution.
File a Data Breach Lawsuit Against Inter-Con Security
If you were affected by the Inter-Con Security data breach, you may have legal options once the scope of the incident becomes clearer.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
