“ShinyHunters claimed to have obtained more than 4.9 million Salesforce records from Brinks Home containing some PII.”
The company whose entire business is guarding your house left 4.9 million customer records sitting in a Salesforce instance that anyone with a stolen OAuth token could walk into. Brinks Home says its products and services were not affected, which is a careful way of saying the alarm still beeps while your address and payment details get auctioned. Parent company Monitronics has filed for bankruptcy twice since 2019, so nobody should expect a serious remediation budget. The lock on the front door was never the weak point.