A hacking group called ShinyHunters claims it attacked Neogen, a Michigan food safety company, and gave Neogen until September 1, 2026 to make contact. Neogen has not publicly confirmed a data breach.
What ShinyHunters Claims About Neogen
In late August 2026, ShinyHunters added Neogen Corporation to its leak site. A leak site is a website where an extortion group names companies it says it has attacked. SOCRadar, a threat intelligence company, reported that the group claimed “unauthorized access to the company’s systems and data.” SOCRadar marked the claim as alleged and not independently verified.
Cybernews reported on August 31, 2026 that the group set a September 1 deadline for Neogen to reach out before it leaked the data. This is known as a “pay or leak” scheme. The group demands payment and threatens to publish files if the company does not pay. At that time, Cybernews said, the group had not posted any samples, and it had not said what kind of data it held.
On October 9, 2026, Have I Been Pwned (HIBP), a free service that lets people check whether their email address appears in a known data set, added a Neogen entry. HIBP reported that ShinyHunters later published data the group claimed came from Neogen. HIBP described that data as “largely corporate contact records.” Neogen has not confirmed that the data came from its systems.
What Neogen Has Said So Far
Neogen has not made a public statement about the claimed attack. Cybernews said it contacted Neogen and had not received a reply. As of October 20, 2026, Emery | Reddy found no notice letters, no state Attorney General filings and no SEC cybersecurity disclosure from Neogen. Neogen’s October 2026 SEC filings covered quarterly results and its annual shareholder meeting. They did not mention a cyber incident.
That silence has now lasted more than seven weeks since the group first listed Neogen. Companies often take weeks or months to investigate before they send notice letters. If Neogen finds that personal information was involved, state laws may require it to notify the people affected.
Who Neogen Is and What Records It Holds
Neogen is a public company (Nasdaq: NEOG) based in Lansing, Michigan. It makes tests that detect foodborne germs such as Salmonella and E. coli, along with allergens and natural toxins. It also sells animal health products, including veterinary supplies and vaccines for livestock, poultry and pets.
A company like Neogen typically keeps records on employees, customers, distributors and business contacts. These records can include names, work email addresses, phone numbers, mailing addresses and job titles. Neogen has not said which, if any, of these records were involved.
What Information Could Be Involved?
Neogen has not confirmed that any personal information was involved. ShinyHunters has not publicly said what it took. The only public description comes from HIBP, which said the published files appeared to come from mailing lists, employee records and other contacts. HIBP’s listing includes names, email addresses, phone numbers, physical addresses, employers and job titles. These details have not been confirmed by Neogen.
Is Neogen Offering Credit Monitoring?
Neogen has not announced credit monitoring or any other help for affected people. If Neogen sends notice letters, those letters should explain any offer and how to enroll.
Why Business Contact Data Still Carries Risk
Names, job titles and work emails may sound harmless. But criminals can use them for phishing, which means fake emails, texts or calls that pretend to come from someone the target trusts. A message that uses a real name, employer and title looks more convincing. That can lead to stolen passwords, fake invoices or payment fraud.
People who worked for, bought from, or did business with Neogen should consider these steps:
- Check their email address at haveibeenpwned.com
- Treat unexpected emails, texts or calls that mention Neogen with caution
- Confirm any invoice or payment change by calling a known phone number
- Turn on two-step login for work and personal email accounts
- Watch for a notice letter from Neogen and keep it if one arrives
Do You Have Legal Options?
Emery | Reddy is investigating the claimed cyber attack on Neogen. Companies that collect information about their workers and customers have a duty to protect it. They also have a duty to give timely notice when personal information is involved in a breach. When a company does not meet those duties, affected individuals may have legal rights and remedies.
Contact the Data Breach Attorneys at Emery | Reddy today for a Free Case Review.
FAQ
Has Neogen confirmed a data breach?
No. As of October 20, 2026, Neogen has not publicly confirmed a data breach. ShinyHunters claims it attacked Neogen, but that claim has not been verified by the company.
Who is ShinyHunters?
ShinyHunters is a hacking and extortion group. Security news outlets have reported on its data theft claims against other companies. It listed Neogen on its leak site in late August 2026.
How many people are affected?
Neogen has not said. No company or government count has been released.
What information was involved?
Neogen has not said. HIBP described the files the group posted as mostly business contact records, such as names, email addresses, phone numbers, addresses, employers and job titles. Neogen has not confirmed any of this.
How do I know if my email is in the data?
You can enter your email address at haveibeenpwned.com. The site will tell you if it appears in the Neogen data set HIBP reviewed.
How do I avoid scams that mention Neogen?
- Do not click links or open files in unexpected messages
- Call the sender back using a number you already trust
- Never share a password or login code by email, text or phone
Should I wait for a letter before reaching out?
No. You do not need a notice letter to ask questions. If you worked for, bought from, or were a customer of Neogen, you can request a Free Case Review now.
Do I have a legal claim?
Companies that collect your information have a duty to protect it and to tell you promptly if it is exposed. If you worked for, bought from, or were a customer of Neogen, you may have rights. Contact Emery | Reddy at 916.995.5968 or visit emeryreddy.com for a Free Case Review to see what you may qualify for. No Fee Unless We Recover.
