Trescal Alleged Data Exposure
The 2025 Trescal data breach occurred in December 2025 when client and supplier records from Trescal (trescal.com), a leading international provider of calibration and precision metrology services, were published on BreachForums.
Exposed Data Types
5- Email addresses
- Job titles
- Names
- Phone numbers
- Physical addresses
About This Record
What information was affected in the Trescal incident?
The leaked database export (contact.json and subdivision.json) encompasses corporate customer accounts and calibration facility contacts. Compromised data classes include:
- Contact Coordinates: Validated professional business email addresses and corporate telephone/mobile numbers.
- Personal & Role Identifiers: Contact full names, corporate roles, and operational positions.
- Enterprise & Facility Coordinates: Affiliated company legal titles, European VAT/SIRET identifiers, physical facility addresses, and postal codes.
How many accounts were affected?
Strict RFC 5322 ASCII canonical verification confirmed 39,582 unique valid email addresses across the database.
Technical analysis and security risks
Because Trescal services critical aerospace, automotive, pharmaceutical, and defense sectors, the exposure of verified corporate procurement and engineering contacts elevates the risk of targeted Business Email Compromise (BEC), supplier impersonation, and fraudulent invoice redirection. Affected organizations should:
- Implement strict secondary verification for any requests regarding banking coordinate modifications or calibration service invoices.
- Reinforce anti-phishing safeguards among engineering and procurement personnel.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
