#shinyhunters
-
Oracle PeopleSoft zero-day exploited by ShinyHunters turns out to be three chained flaws
Zero Day Initiative researchers found that the critical CVE-2026-35273 in Oracle PeopleSoft is really three linked bugs across two components. At its core is the product's default trust in its own loopback address.
-
Massive Florida DMV data breach hits current and former residents
Florida has begun issuing alerts after a statewide breach at its Department of Motor Vehicles, an incident tied to the ShinyHunters group.
-
FBI Arrests Founder of a Ransomware Negotiation Firm
A Canadian who specialized in negotiating with ransomware crews was arrested in Pennsylvania. He is tied to the investigation into ShinyHunters, the group that stole data on thousands of FBI employees.
-
FBI arrests another suspected ShinyHunters member after breach of its systems
FBI Director Kash Patel announced a fresh arrest tied to September's breach of bureau systems. Press reports say the detainee is a Canadian citizen held in Pennsylvania.
-
ShinyHunters Leader Nabbed Mid-Extortion of Boeing Spin-off
A teenager from Amman who led the data-theft gang has been detained and, per Reuters, is now cooperating with the FBI. He was caught while his group was extorting a former Boeing unit, Jeppesen ForeFlight.
-
ShinyHunters hacker reportedly held in Jordan, helping the FBI
Reuters reports that a ShinyHunters member known online as Rey has been detained in Jordan and is now cooperating with investigators to help locate his alleged co-conspirators.
-
Dutch Police Arrest ‘Reformed’ Hacker in ShinyHunters Probe
Police in the Netherlands have arrested a 23-year-old convicted cybercriminal suspected of aiding the ShinyHunters group. Days later the remaining members escalated dramatically — breaching the FBI's jobs site and extorting Russia's Cl0p.
-
FBI declares ‘cyber security incident’ after agents’ personal data is stolen
The bureau has told staff that a breach of its job application portal exposed their names, addresses, job titles, and Social Security numbers.
-
Attackers Bypass WAFs to Exploit an Oracle PeopleSoft Flaw
Google warns of a renewed wave of mass exploitation against a critical Oracle PeopleSoft flaw, with a ShinyHunters-linked group slipping past WAF rules and dropping web shells.
-
ShinyHunters breached Clop's leak site via a Grav CMS path traversal flaw
The Clop ransomware crew has moved its leak site to a new Tor address after admitting its old server was hacked and defaced through an unpatched path traversal flaw in Grav CMS.
-
Hackers Claim to Have Breached the FBI and Stolen Data on Every Employee
The group ShinyHunters says it stole personal data on all FBI employees and applicants. A sample of 5,000 people includes names, addresses, phone numbers, and details on spouses.
-
Florida Confirms Driver Database Breach via a Police Officer's Account
The Florida Department of Highway Safety and Motor Vehicles has acknowledged a leak from the DAVID database. The attackers used stolen credentials that a police officer had carelessly kept on a personal device.
-
Passkey-Themed Phishing: How Data Is Stolen from Microsoft 365
Microsoft is tracking a wave of attacks in which ransomware groups use the pretext of an “urgent passkey update” to coax access out of corporate accounts and methodically siphon data from the cloud.
-
ShinyHunters claim breach of Florida's "DAVID" DMV database
The extortion group ShinyHunters claims to have stolen more than 200,000 driver records from Florida's Department of Motor Vehicles. As proof, they published Jeffrey Epstein's record.
-
Mathspace Data Breach Affects Over a Million People
The educational platform Mathspace has reported a breach of its internal Metabase reporting system, in which attackers stole the data of more than a million students, parents and school staff.
-
McKesson Confirms Breach: ShinyHunters Claims Theft of Patient Data
Pharmaceutical distributor McKesson has disclosed unauthorized access to third-party applications and the theft of data. The ShinyHunters group is claiming responsibility for the attack, saying it made off with roughly 284 million patient records.
-
The Carhartt Data Breach: 12.9 Million Accounts Compromised
The extortion group ShinyHunters has published the data of nearly 13 million customers and employees of the American clothing maker Carhartt after the company refused to pay a ransom.
-
RingCentral Data Breach Affects 1.6 Million Accounts
The ransomware group ShinyHunters stole personal data from users of the RingCentral cloud platform following a July breach. The leak was confirmed by the Have I Been Pwned service.
-
Amgen Reports Patient Data Breach from Cloud Systems
Biotech giant Amgen has confirmed the theft of corporate data and protected health information belonging to patients from the cloud environments of third-party service providers.
-
ShinyHunters claim responsibility for the Ernst & Young data breach
The extortion group ShinyHunters says it is behind the recent breach at auditing firm Ernst & Young and is threatening to publish the stolen data unless the firm gets in touch by July 31.
- More