Advertisement
FBI Arrests Ransomware Negotiator Linked to ShinyHunters
FBI agents arrested a Canadian ransomware negotiation executive in Pennsylvania over alleged ties to the ShinyHunters hacking group.
ShinyHunters Extorted Boeing Spin-off Prior to Arrests
Details on the arrest of suspected ShinyHunters leader 'Rey' in Jordan following extortion attempts against a Boeing spin-off.
FBI Data Breach: Missed Patch on PeopleSoft Exposes Employee Data
A critical patch failure on an Accenture-managed Oracle PeopleSoft system led to a data breach, exposing FBI employee information to ShinyHunters.
ShinyHunters Hacker Detained in Jordan, Cooperating With FBI
A suspected ShinyHunters hacker known as Rey was detained in Jordan and is cooperating with the FBI, impacting the extortion group's infrastructure.
ShinyHunters Arrest and PeopleSoft Zero-Day Exploitation
Dutch police arrest a reformed hacker linked to ShinyHunters, prompting retaliatory attacks involving Oracle PeopleSoft CVE-2026-35273.
Mathspace Breach: Over 1 Million Impacted by Metabase Zero-Day
Mathspace disclosed a data breach affecting over 1 million students, staff, and parents due to a Metabase vulnerability.
Advertisement
ShinyHunters: Dark Reading on Potential ReliaQuest Breach
Dark Reading editors discuss the latest activities of the ShinyHunters threat group, including inquiries into a potential breach affecting ReliaQuest.
ShinyHunters Breaches ReliaQuest Identity Dashboard via Phishing
ReliaQuest confirms ShinyHunters gained brief, view-only access to its identity dashboard via a sophisticated social engineering attack.
ReliaQuest Thwarts ShinyHunters Social Engineering Attack on Okta SSO
ReliaQuest confirms a social engineering attack by ShinyHunters targeting an employee's Okta SSO, blocked from accessing applications or customer data.
RingCentral Data Breach Exposes 1.6M Users to ShinyHunters
RingCentral data breach impacts 1.6 million users after a sophisticated social engineering attack by ShinyHunters. Names, emails, addresses, and phone numbers exposed.
ShinyHunters Breaches ShipMonk: 14,000 Trezor Customers' Data Exposed
ShinyHunters group breached shipping provider ShipMonk, exposing personal data of 14,000 Trezor customers via a Metabase SQL injection vulnerability.
ShinyHunters Breaches Brinks Home, Threatens Data Leak
ShinyHunters claims a breach of Brinks Home systems, threatening to leak stolen data. This analysis covers the threat actor, potential impact, and mitigation.
ShinyHunters Targeting Healthcare: Data Theft Surges, Health-ISAC Warns
Health-ISAC warns of increasing ShinyHunters data theft attacks on healthcare and med-tech organizations. Learn about TTPs and critical mitigations.
ShinyHunters Claims Ernst & Young Hack: Analysis of Third-Party Risks
Ernst & Young faces data theft claims from ShinyHunters following a breach of a third-party platform. Learn about the impact and vendor security mitigation.
ShinyHunters Data Leaks Fuel $2,000 Sextortion Phishing Campaign
Scammers are weaponizing personal data from ShinyHunters leaks to launch convincing sextortion campaigns demanding $2,000 in Bitcoin from victims.
Medtronic Breach: ShinyHunters Exfiltrates 3.8M Patient Records
Medtronic confirms a data breach by ShinyHunters impacting 3.8 million people, exposing personal and protected health information (PHI) from corporate IT systems.
Medtronic Data Breach: ShinyHunters Campaign Exposes Customer PII
Medtronic notifies customers of a data breach linked to ShinyHunters. Learn how cloud credential theft led to the exposure of patient and customer records.
ShinyHunters Breach NAIC via PeopleSoft Zero-Day: Public Data Stolen
ShinyHunters exploited an Oracle PeopleSoft zero-day to breach NAIC, exfiltrating public data, logs, and configuration files. Review PeopleSoft security.
Nissan Breach: Oracle PeopleSoft Zero-Day Exploited by ShinyHunters
Nissan discloses a data breach impacting current and former employees, attributed to an exploited Oracle PeopleSoft zero-day vulnerability linked to the ShinyHunters…
Kodak Data Breach Confirmed: ShinyHunters Linked to Exfiltration
Kodak acknowledges a data breach after ShinyHunters claimed responsibility, with the threat actor reportedly exfiltrating sensitive company information.
ShinyHunters Exploits Oracle ERP Zero-Day to Breach Higher Ed
ShinyHunters is exploiting an unpatched zero-day vulnerability in Oracle ERP software, targeting US higher education institutions for data theft.
CVE-2026-35273: Oracle PeopleSoft RCE Exploited as Zero-Day by ShinyHunters
Mandiant and GTIG identified ShinyHunters (UNC6240) exploiting CVE-2026-35273, a critical RCE in Oracle PeopleSoft, targeting higher education.
Oracle PeopleSoft RCE via CVE-2026-35273 — Mitigation Guide
ShinyHunters (UNC6240) exploited an Oracle PeopleSoft zero-day (CVE-2026-35273) to breach university networks and exfiltrate data for extortion purposes.
CVE-2024-21319: PeopleSoft Auth Bypass Exploited by ShinyHunters
Oracle PeopleSoft zero-day CVE-2024-21319, an authentication bypass, is being actively exploited by ShinyHunters. Patch PeopleSoft 8.59, 8.60, 8.61 now.