All Breaches
June 16, 2026 Verified Education

Houston City College 2026 Data Breach

The 2026 Houston City College data breach came to light in June 2026 when the ShinyHunters group named the college among the targets of a “pay or leak” campaign. Resecurity documented that announcement on June 16, 2026.

831.6 Thousand
Affected People
7
Data Types
High
Severity
Oct 9, 2026
Last updated

Protect Yourself

Check whether you were affected by this breach

Check my email

Exposed Data Types

7
  • Education details
  • Dates of birth
  • Email addresses
  • Genders
  • Names
  • Phone numbers
  • Physical addresses

About This Breach

An independent data-set review later classified the publicly released records as a verified breach and identified 831,642 unique email addresses. The records are associated with current and former students.

Verified Incident Timeline

Resecurity and Security Affairs reported that Houston City College was named among the group's new targets on June 16, 2026. The data set was later released publicly, and the verified breach record was cataloged on July 28, 2026.

What Information Was Affected?

The verified data types are academic records, citizenship statuses, dates of birth, email addresses, genders, names, telephone numbers, and physical addresses. The information may vary by person.

What the Sources Confirm

An independent review verifies the published data set, while Resecurity and Security Affairs document the college being named as a target. The reviewed sources do not include a public college notice describing technical incident details or response steps, so no additional claim is made about the access method.

What Should Affected People Do?

Students and alumni should verify the sender and request through an independent college channel before opening a link in a targeted message that references academic records or contact details. Enable multi-factor authentication on email and college accounts, and review account-recovery details for unauthorized changes.

Verification and editorial method

LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.

Report missing or incorrect information