Cybersecurity articles tagged #Extortion on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/ringcentral-data-breach-exposes-1-6m-users-to-shinyhuntershttps://runtimerebel.com/blog/ringcentral-data-breach-exposes-1-6m-users-to-shinyhuntersRingCentral data breach impacts 1.6 million users after a sophisticated social engineering attack by ShinyHunters. Names, emails, addresses, and phone numbers exposed.Sat, 15 Aug 2026 16:14:41 GMTShinyHuntersData BreachSocial EngineeringExtortionRingCentralhttps://runtimerebel.com/blog/ransom-cartel-ransomware-creator-sentenced-to-16-years-in-prisonhttps://runtimerebel.com/blog/ransom-cartel-ransomware-creator-sentenced-to-16-years-in-prisonMaksim Silnikau, creator of the Ransom Cartel ransomware operation, receives a 16-year prison sentence following international law enforcement cooperation.Thu, 06 Aug 2026 01:56:23 GMTRansom CartelRansomwareREvilCredential TheftExtortionhttps://runtimerebel.com/blog/shinyhunters-breaches-brinks-home-threatens-data-leakhttps://runtimerebel.com/blog/shinyhunters-breaches-brinks-home-threatens-data-leakShinyHunters claims a breach of Brinks Home systems, threatening to leak stolen data. This analysis covers the threat actor, potential impact, and mitigation.Thu, 30 Jul 2026 17:31:04 GMTShinyHuntersBrinks HomeData BreachData LeakExtortionCybercrimehttps://runtimerebel.com/blog/abbott-labs-probes-dual-cyber-incidents-data-theft-extortionhttps://runtimerebel.com/blog/abbott-labs-probes-dual-cyber-incidents-data-theft-extortionAbbott Laboratories confirms unauthorized access to Exact Sciences systems and investigates alleged LabCentral breach amid extortion. Learn about the dual threat.Fri, 17 Jul 2026 20:58:16 GMTAbbott LaboratoriesExact SciencesLabCentralData BreachExtortionCyber IncidentHealthcare Securityhttps://runtimerebel.com/blog/kairos-group-extorts-1m-from-us-government-in-data-theft-campaignhttps://runtimerebel.com/blog/kairos-group-extorts-1m-from-us-government-in-data-theft-campaignA US government entity paid $1M to the Kairos group to prevent a data leak, signaling a shift from traditional ransomware to pure data-theft extortion.Sat, 04 Jul 2026 17:08:22 GMTKairosData TheftExtortionUS GovernmentRansom ISAChttps://runtimerebel.com/blog/oracle-peoplesoft-rce-via-cve-2026-35273-mitigation-guidehttps://runtimerebel.com/blog/oracle-peoplesoft-rce-via-cve-2026-35273-mitigation-guideShinyHunters (UNC6240) exploited an Oracle PeopleSoft zero-day (CVE-2026-35273) to breach university networks and exfiltrate data for extortion purposes.Thu, 11 Jun 2026 20:55:48 GMTCVE-2026-35273ShinyHuntersOracle PeopleSoftUNC6240Extortionhttps://runtimerebel.com/blog/silent-ransom-group-targets-us-law-firms-via-vishing-and-intrusionshttps://runtimerebel.com/blog/silent-ransom-group-targets-us-law-firms-via-vishing-and-intrusionsSilent Ransom Group (Luna Moth) targets US law firms using vishing and physical intrusions for data extortion. Technical analysis and mitigation strategies.Tue, 09 Jun 2026 05:28:46 GMTSilent Ransom GroupLuna MothVishingLaw FirmsExtortionSocial Engineeringhttps://runtimerebel.com/blog/unc3753-targets-us-law-firms-with-vishing-physical-intrusionshttps://runtimerebel.com/blog/unc3753-targets-us-law-firms-with-vishing-physical-intrusionsUNC3753 (Luna Moth) leverages vishing and physical office intrusions to steal sensitive data from US law firms and professional services, leading to swift extortion.Fri, 05 Jun 2026 16:59:08 GMTUNC3753Luna MothSilent Ransom GroupVishingSocial EngineeringData TheftExtortionLaw FirmsPhysical IntrusionRMMWinSCPRclonehttps://runtimerebel.com/blog/shinyhunters-leak-234-gb-of-dentaquest-data-impacting-2-6-millionhttps://runtimerebel.com/blog/shinyhunters-leak-234-gb-of-dentaquest-data-impacting-2-6-millionThe ShinyHunters extortion group leaked 234 GB of data from DentaQuest, impacting 2.6 million individuals. Learn about the risks and how to protect PHI.Fri, 05 Jun 2026 13:14:00 GMTShinyHuntersDentaQuestData LeakExtortionHealthcare Securityhttps://runtimerebel.com/blog/charter-communications-data-breach-millions-of-records-exposedhttps://runtimerebel.com/blog/charter-communications-data-breach-millions-of-records-exposedShinyHunters leaked data allegedly from Charter Communications, potentially exposing nearly 5 million customer records. Organizations must assess third-party risk.Fri, 29 May 2026 17:20:56 GMTShinyHuntersCharter CommunicationsData BreachExtortionData Leakhttps://runtimerebel.com/blog/the-com-analyzing-the-intersection-of-cybercrime-and-physical-violencehttps://runtimerebel.com/blog/the-com-analyzing-the-intersection-of-cybercrime-and-physical-violenceAnalysis of The Com, a criminal ecosystem using social engineering and SIM swapping to fund violent activities, sextortion, and neo-Nazi accelerationism.Fri, 29 May 2026 13:20:49 GMTThe ComSocial EngineeringScattered SpiderExtortionPhysical Securityhttps://runtimerebel.com/blog/silent-ransom-group-targets-law-firms-via-physical-social-engineeringhttps://runtimerebel.com/blog/silent-ransom-group-targets-law-firms-via-physical-social-engineeringFBI warns of Silent Ransom Group (Luna Moth) targeting law firms using physical social engineering and data theft for extortion. Learn how to defend.Thu, 28 May 2026 05:30:39 GMTSilent Ransom GroupLuna MothLaw Firm SecuritySocial EngineeringExtortionhttps://runtimerebel.com/blog/charter-data-breach-confirmed-shinyhunters-extortion-threathttps://runtimerebel.com/blog/charter-data-breach-confirmed-shinyhunters-extortion-threatCharter Communications confirms a data breach following an extortion threat by ShinyHunters.Tue, 26 May 2026 20:46:11 GMTCharter CommunicationsShinyHuntersData BreachExtortionTelecommunicationsThird Party Riskhttps://runtimerebel.com/blog/grafana-github-token-leak-codebase-access-and-extortion-attempthttps://runtimerebel.com/blog/grafana-github-token-leak-codebase-access-and-extortion-attemptGrafana discloses a security incident where an unauthorized party used a GitHub token to download source code, leading to a failed extortion attempt.Sun, 17 May 2026 08:48:24 GMTGrafanaGitHubToken LeakCodebase TheftExtortionhttps://runtimerebel.com/blog/blackfile-analyzing-unc6671-vishing-cloud-data-extortionhttps://runtimerebel.com/blog/blackfile-analyzing-unc6671-vishing-cloud-data-extortionExamines UNC6671's BlackFile vishing, AiTM, and cloud data exfiltration tactics against Microsoft 365 & Okta. Actionable mitigations included.Fri, 15 May 2026 20:32:33 GMTUNC6671BlackFileVishingAitMMicrosoft 365OktaSharePointOneDriveData ExfiltrationExtortionSocial Engineeringhttps://runtimerebel.com/blog/shinyhunters-defaces-canvas-login-portals-in-extortion-campaignhttps://runtimerebel.com/blog/shinyhunters-defaces-canvas-login-portals-in-extortion-campaignShinyHunters breached Instructure, defacing Canvas login portals for numerous educational institutions, potentially impacting user credentials and initiating extortion.Fri, 08 May 2026 00:50:31 GMTShinyHuntersInstructureCanvas LMSExtortionEducation SectorDefacementCredential Thefthttps://runtimerebel.com/blog/instructure-data-breach-student-ids-and-private-messages-exposedhttps://runtimerebel.com/blog/instructure-data-breach-student-ids-and-private-messages-exposedEdtech leader Instructure discloses a data breach involving student IDs and user messages after hackers disrupted services and threatened data leaks.Mon, 04 May 2026 08:56:48 GMTInstructureCanvas LMSEdTechPII LeakExtortionhttps://runtimerebel.com/blog/instructure-data-breach-shinyhunters-claims-theft-of-employee-datahttps://runtimerebel.com/blog/instructure-data-breach-shinyhunters-claims-theft-of-employee-dataEducational technology giant Instructure confirms an internal data breach after the ShinyHunters threat group claims to have stolen sensitive corporate data.Mon, 04 May 2026 00:50:54 GMTInstructureShinyHuntersCanvas LMSData BreachExtortionhttps://runtimerebel.com/blog/checkmarx-data-leak-lapsus-group-targets-github-repositorieshttps://runtimerebel.com/blog/checkmarx-data-leak-lapsus-group-targets-github-repositoriesLAPSUS$ threat actors leaked source code stolen from Checkmarx's private GitHub repositories. Analyze the impact of this supply chain security incident.Tue, 28 Apr 2026 16:42:35 GMTLapsus GroupCheckmarxGithub LeakSource Code TheftExtortionhttps://runtimerebel.com/blog/adt-confirms-data-breach-amid-shinyhunters-extortion-threathttps://runtimerebel.com/blog/adt-confirms-data-breach-amid-shinyhunters-extortion-threatADT confirms a data breach following a ShinyHunters extortion attempt. Customer data is at risk; security professionals must advise enhanced vigilance.Sat, 25 Apr 2026 00:43:18 GMTADTShinyHuntersData BreachExtortionCybercrimeThreat Intelligencehttps://runtimerebel.com/blog/angelo-martino-pleads-guilty-to-aiding-blackcat-ransomware-attackshttps://runtimerebel.com/blog/angelo-martino-pleads-guilty-to-aiding-blackcat-ransomware-attacksAngelo Martino pleaded guilty to collaborating with BlackCat (ALPHV) ransomware operators, facilitating credential-based breaches and high-stakes negotiations.Tue, 21 Apr 2026 16:30:02 GMTBlackCatALPHVRansomware as a ServiceExtortionCredential Thefthttps://runtimerebel.com/blog/kraken-extorted-by-hackers-following-insider-account-breachhttps://runtimerebel.com/blog/kraken-extorted-by-hackers-following-insider-account-breachKraken faces extortion after a social engineering attack on a support agent led to unauthorized internal system access and threatened customer data exposure.Wed, 15 Apr 2026 00:45:28 GMTKrakenInsider ThreatExtortionSocial EngineeringCrypto Securityhttps://runtimerebel.com/blog/hims-data-breach-exposes-patient-phi-technical-impact-analysishttps://runtimerebel.com/blog/hims-data-breach-exposes-patient-phi-technical-impact-analysisAnalysis of the Hims & Hers Health data breach exposing sensitive PHI. Learn how threat actors use health data for targeted extortion and phishing campaigns.Sat, 11 Apr 2026 00:38:27 GMTHims Hers HealthPhi ExposureTelehealth SecurityData ExfiltrationExtortionhttps://runtimerebel.com/blog/wynn-resorts-breach-21000-employees-impacted-by-shinyhuntershttps://runtimerebel.com/blog/wynn-resorts-breach-21000-employees-impacted-by-shinyhuntersCasino operator Wynn Resorts confirms a data breach affecting 21,000 employees following an extortion attempt by the ShinyHunters threat group.Tue, 07 Apr 2026 08:34:56 GMTWynn ResortsShinyHuntersEmployee DataPII ExposureExtortionhttps://runtimerebel.com/blog/insider-threat-former-engineer-locks-254-windows-servers-in-extortionhttps://runtimerebel.com/blog/insider-threat-former-engineer-locks-254-windows-servers-in-extortionA former infrastructure engineer pleaded guilty to a $750,000 extortion plot after locking administrators out of 254 Windows servers and deleting backups.Fri, 03 Apr 2026 12:22:29 GMTInsider ThreatWindows ServerExtortionIdentity ManagementIncident Responsehttps://runtimerebel.com/blog/lapsus-claims-astrazeneca-breach-sensitive-code-and-data-at-riskhttps://runtimerebel.com/blog/lapsus-claims-astrazeneca-breach-sensitive-code-and-data-at-riskThe Lapsus$ extortion group claims to have compromised AstraZeneca internal code repositories, employee credentials, and sensitive personnel data.Tue, 24 Mar 2026 16:29:45 GMTLapsusAstraZenecaExtortionData BreachSource Code Leakhttps://runtimerebel.com/blog/inc-ransomware-oceania-healthcare-and-government-sectors-under-siegehttps://runtimerebel.com/blog/inc-ransomware-oceania-healthcare-and-government-sectors-under-siegeINC Ransomware has launched a series of attacks against healthcare and government agencies in Oceania, using double extortion to compromise sensitive data.Thu, 12 Mar 2026 00:30:05 GMTINC RansomwareOceaniaHealthcare SecurityAustraliaNew ZealandExtortionhttps://runtimerebel.com/blog/alabama-man-pleads-guilty-to-extortion-via-social-media-hijackinghttps://runtimerebel.com/blog/alabama-man-pleads-guilty-to-extortion-via-social-media-hijackingDevin Deandre Moore admits to hijacking hundreds of accounts for sextortion. Analysis of the TTPs used in this large-scale digital extortion campaign.Mon, 02 Mar 2026 20:13:38 GMTSocial Media HackingExtortionCyberstalkingPhishingIdentity Thefthttps://runtimerebel.com/blog/olympique-marseille-confirms-data-leak-following-heller-cyberattackhttps://runtimerebel.com/blog/olympique-marseille-confirms-data-leak-following-heller-cyberattackFrench football club Olympique de Marseille investigates a data breach after the Heller extortion group leaked 3.5 GB of sensitive player and staff records.Thu, 26 Feb 2026 16:24:27 GMTOlympique De MarseilleHeller GroupData LeakSports IndustryExtortionFrancehttps://runtimerebel.com/blog/wynn-resorts-data-breach-shinyhunters-exfiltrates-employee-piihttps://runtimerebel.com/blog/wynn-resorts-data-breach-shinyhunters-exfiltrates-employee-piiWynn Resorts confirms a data breach impacting employee PII, attributed to the ShinyHunters extortion gang. Analysis covers TTPs and mitigation strategies.Wed, 25 Feb 2026 04:42:06 GMTWynn ResortsShinyHuntersData BreachEmployee DataExtortionPII