accounts
831,642
Breach happened
16 June 2026
Added to the register
28 July 2026
In June 2026, Houston City College was the target of a ShinyHunters "pay or leak" extortion campaign. Data allegedly obtained from the college was later published publicly and included 832k unique email addresses along with names, addresses, phone numbers, academic records, and other personal information relating to both current students and alumni.

What leaked

  • Identity documents

    It never changes, so it stays useful to a fraudster for life — and can open accounts or credit in your name.

    Identity theft →

  • Phone number

    Used for calls and texts that open already knowing who you are.

    Fake adviser calls →

  • Postal address

    Used to stage a delivery, a utility visit or a neighbour that never happened.

    Social engineering →

  • Date of birth

    Used to clear the “confirm your identity” step on a call you did not make.

    Identity theft →

  • Email address

    The address every one of these scams will arrive at.

    Phishing →

  • Name

    Used to make a cold approach look like a conversation already under way.

    Social engineering →

  • Education

    Where and when you studied — a detail that makes a stranger sound like they know you.

  • Demographic details

    Age, gender and the like. Relatively harmless on their own.

What is not listed

  • Passwords
  • Bank details
  • Card numbers

So there is no password to change here — the usual first move does not apply.

The record shows what was found in the data. Not listed is not the same as proven untouched.

Source

A specialist service holds the stolen data, checks it is genuine, and lets anyone search their own address in it. The strongest evidence short of an official source.

Verification service

Have I Been Pwned

Under licence CC BY 4.0

Collects leaked files, checks they are genuine, and lets anyone search their own address in them. Run by one security researcher since 2013.

See the source →