Bunch
Data Breach on April 07, 2026
| Data Breach Report | |||
|---|---|---|---|
| Victim | bunch.ca | ||
| Threat Actor | DragonForce | ||
| Date Discovered | Apr 07, 2026 | ||
| Description | Bunch is an engineering and construction company based in Canada, specializing in engineering, procurement, and construction (EPC) services for the energy sector. | ||
| Leak Size | 938.82GB |
Credential Exposure for bunch.ca
We've indexed 44 @bunch.ca accounts from external breaches, plus 28 credentials for bunch.ca itself.
Last checked Aug 16, 2026
| @bunch.ca addresses from external breaches | |
|---|---|
| Combo lists | 33 accounts · most recent Aug 15, 2026 |
| Third-party breaches | 18 accounts · across 20 breaches · 16 with a plaintext password · most recent Aug 18, 2024 |
| Passwords for bunch.ca accounts | |
|---|---|
| Combo lists | 17 logins · most recent Aug 3, 2026 |
| Infostealer logs | 17 logins · 1 infected devices · most recent Aug 4, 2026 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
Bunch was breached. Check if your company's credentials have been exposed in this or other data breaches.
Check your exposure →Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.