Fluke Hit by ShinyHunters Extortion Campaign, Exposing 800K+ Email Addresses Earlier this month, industrial technology firm Fluke fell victim to an extortion campaign by the ShinyHunters hacking group. The attackers leaked over 800,000 email addresses, along with corporate contact details and internal support case records. According to analysis, 51% of the exposed emails were already publicly listed on LinkedIn, suggesting a mix of existing and newly compromised data. The breach highlights the group’s ongoing targeting of corporate networks, where stolen data is often used for further attacks or sold on underground markets. Fluke has not publicly confirmed the full scope of the incident, but the leak underscores the persistent threat posed by ransomware and extortion groups to enterprise security. The exposed data could enable phishing campaigns, credential-stuffing attacks, or social engineering efforts against affected individuals and organizations.

Fluke Corporation Data Breach Exposes Sensitive Consumer Information Fluke Corporation, a leading U.S. manufacturer of industrial test and measurement equipment based in Everett, Washington, has reported a data breach compromising sensitive personal information. The incident was disclosed to the Vermont Attorney General on May 13, 2026, affecting 43 individuals in Vermont though the full scope remains unclear. The breach exposed highly sensitive data, including Social Security numbers and health records, heightening risks of identity theft and fraud. Details about the attack’s origin, method, or broader impact have not yet been released, with updates expected as the investigation progresses. Class action law firm Shamis & Gentile P.A. is actively investigating the breach, noting that affected individuals may be eligible for compensation through legal action. Fluke Corporation, founded in 1948, serves industries ranging from electrical engineering to biomedical diagnostics, making the breach particularly concerning for professionals reliant on its tools. Further developments are pending.

Fluke Corporation Confirms 2025 Data Breach Impacting 18,517 Individuals Fluke Corporation, a Washington-based manufacturer of industrial testing equipment, disclosed a data breach affecting 18,517 individuals after hackers exploited a vulnerability in a third-party application. The breach, which occurred between August 10 and October 7, 2025, exposed sensitive data, including Social Security numbers, dates of birth, and disability self-identification indicators. Fluke detected the intrusion on September 29, 2025, and has since notified affected parties, offering 24 months of free credit monitoring and identity theft insurance through Equifax. The ransomware group Clop claimed responsibility for the attack, though Fluke has not confirmed the assertion. Clop, active since 2019, specializes in exploiting zero-day vulnerabilities in enterprise software, including recent attacks on Oracle’s E-Business Suite and file transfer applications. In 2025 alone, Clop took credit for 458 ransomware incidents, with 40 confirmed by targeted organizations. This year, the group has already claimed 122 additional attacks, including a breach at Tulane University affecting 4,633 individuals. The Fluke breach aligns with a broader trend of ransomware attacks on U.S. manufacturers, which saw 92 confirmed incidents in 2025, compromising approximately 156,000 personal records. Other recent manufacturing breaches include attacks on Extant Aerospace (August 2025), Mill Creek Fabrics (September 2025), and AOTCO Metal Finishing (March 2026). Such attacks often disrupt operations, steal data, and demand ransoms to prevent public disclosure or further exploitation.

The New Hampshire Department of Justice reported that Fluke Corporation experienced data breaches involving the personal information of approximately 78 New Hampshire residents. The breaches were identified in October and November 2023, with unauthorized access occurring between January 25, 2023 and November 6, 2023. The company notified residents about the breaches on October 3, 2024, and is offering credit monitoring services as part of their response.