Federal Bureau of Investigation (FBI) agents arrested an executive from a Canadian cybersecurity firm on Thursday in Pennsylvania, as part of an ongoing investigation into the ShinyHunters hacking group. This group is reportedly responsible for a recent data breach…
Reports mentioning ShinyHunters
A teenager from Amman, Jordan, identified by the hacker handle “Rey” and suspected of leading the prolific data theft and extortion group ShinyHunters, has been detained and is reportedly cooperating with the FBI to identify other members of the hacking…
The U.S. Department of Defense is in the process of notifying more than 2 million current and former military personnel that their sensitive personal information has been compromised through a breach of one of its networks.
Dutch police have apprehended an individual identified as a member of the notorious ShinyHunters cybercriminal gang. This organization has gained significant notoriety for its involvement in large-scale data breaches and the subsequent sale of stolen information on the dark web…
Dutch police confirmed on March 14, 2024, that a 24-year-old man arrested earlier that month in Amsterdam is a suspect in an investigation targeting the ShinyHunters hacking group. The arrest, made by the Dutch National Police's cybercrime unit, is…
Dutch police arrested 23-year-old Pepijn van der Stap on suspicion of facilitating data thefts and extortions attributed to the hacker group ShinyHunters. The arrest, which occurred this month, was followed by a significant increase in ShinyHunters' cybercriminal activities, including breaches…
ShinyHunters, a prominent and prolific hacker collective notorious for its data theft and subsequent sale on the dark web, has recently asserted responsibility for a cybersecurity breach targeting the U.S. Federal Bureau of Investigation (FBI).
The ShinyHunters extortion gang has resumed widespread exploitation of the Oracle PeopleSoft CVE-2026-35273 vulnerability by employing a URL-encoding trick to bypass web application firewall (WAF) rules. This tactic allows the threat actors to circumvent security measures designed to mitigate…
The Clop ransomware gang's data leak site, previously hosted at a Tor address, was compromised and defaced by threat actor ShinyHunters. This breach occurred due to an unpatched Grav Content Management System (CMS) flaw, identified as an unauthenticated path traversal…
The Federal Bureau of Investigation (FBI) has launched an official inquiry into a suspected data breach impacting its dedicated jobs portal, FBIjobs.gov. This investigation commenced following public claims made by the cybercriminal collective known as ShinyHunters, who asserted they had…
The cyber extortion group ShinyHunters announced on Tuesday, March 19, 2024, that it had successfully breached the U.S. Federal Bureau of Investigation (FBI). In a statement disseminated on the dark web, the group asserted that it had obtained highly sensitive…
The cybercriminal group ShinyHunters has claimed responsibility for breaching FBI systems by exploiting a previously unknown zero-day vulnerability in Oracle's PeopleSoft software. According to a post on a dark web forum, the group stated that this exploit allowed them…
The notorious hacking collective ShinyHunters has successfully breached the data leak site operated by the Clop (also known as Cl0p) ransomware gang. This intrusion, which occurred recently, involved defacing the Tor-based website, a method of anonymized communication on the internet…
The hacking group ShinyHunters has published thousands of personal data records belonging to Florida drivers online, following a failure by the state to meet their ransom demands. The breach targeted the Florida Department of Highway Safety and Motor Vehicles (FLHSMV)…
Healthcare company AdaptHealth confirmed that data belonging to 4.1 million individuals was exposed in a cyberattack that was discovered in July. The company attributed this incident to the ShinyHunters threat group, a known entity in the cybersecurity landscape.
Clothing retailer Carhartt has been impacted by a significant data breach, with sensitive information from approximately 12.9 million accounts being published online. The data was released by the ShinyHunters extortion group, known for targeting organizations and publishing stolen data…
Cybersecurity firm ReliaQuest confirmed on March 11, 2024, that it was the target of a data theft attempt after a breach by the hacking group ShinyHunters. The attackers successfully impersonated a member of ReliaQuest's security team to gain access…
A significant data breach at RingCentral, a provider of cloud-based communication and collaboration solutions, has exposed the personal information of approximately 1.6 million accounts. The breach occurred in July, and the stolen data was subsequently identified by the data breach…
Brinks Home Security, a prominent player in the home security industry, confirmed on March 11, 2024, that it has experienced a data breach. This confirmation followed claims made by the cybercrime collective known as ShinyHunters, which asserted responsibility…
Threat actors are exploiting email addresses obtained from data breaches attributed to the ShinyHunters extortion group to conduct a widespread sextortion scam. These actors are sending personalized emails to victims, demanding $2,000 in Bitcoin.