Roughly 832,000 records from Houston City College were exposed, according to Have I Been Pwned. In June 2026 the institution faced an extortion attempt by the group ShinyHunters, and the stolen data was subsequently released publicly. Current students and alumni are affected, with names, addresses, phone numbers, dates of birth, academic records and citizenship status among the exposed fields. Because the data was published rather than sold, it is freely available to anyone — and the combination of phone number, home address and genuine academic details makes scam calls and phishing referencing a real enrolment very convincing.
Reported affected: 831.642 / 831,642
Source: Have I Been Pwned ↗
Free, no signup. Runs against real breach databases.
You can require the company to tell you exactly what data it has about you, and give you a free copy. It has one month to answer.
You can require them to erase your personal data. Also one month, also free of charge.
If they ignore you or refuse without valid grounds, you can file a free complaint. Regulators can investigate and fine.
A leaked email and phone number don't just sit in one dump — data brokers buy breach data, merge it with public records, and resell it. That's why the spam calls and phishing texts keep coming months later. Deleting your data from the breached company is only the first step; getting it out of the broker network is what actually stops the follow-on damage.
Privora sends legally-backed GDPR erasure requests across the whole network, then re-checks so it stays gone.