has responded to claims made by the hackers behind last week’s Instructure education breach. The cyber extortion group ShinyHunters recently published a list of more than 2,700 schools, colleges, and other entities in the education sector allegedly...

have been caught up in a global IT breach, with possibly lifelong impacts for students. Between 3 and 5 May 2026, the ShinyHunters cyber extortion group claimed responsibility for a data breach of cloud education provider Instructure and its Canvas...

today. “School principals are in the process of contacting families and teachers to advise them of the breach.” The ShinyHunters cyber extortion group is behind the incident and is claiming to have compromised millions of students and staff globally,...

were involved. If that changes, we will notify any impacted institutions.” While Instructure confirmed the breach, the ShinyHunters cyber extortion group claimed responsibility, with the hackers saying they had compromised more than 200 million students...

for more information. The fight for attribution – Qilin or ShinyHunters? The incident was first claimed by the infamous ShinyHunters threat group on 1 May. In the listing, the group said it stole 500,000 Salesforce records, including internal corporate...

information”; Have I Been Pwned adds 13.5 million emails to database. Following being listed as a victim by the ShinyHunters cyber extortion group, educational publishing giant McGraw Hill has confirmed the hackers were able to access its Salesforce...

Theft Auto V and Red Dead Redemption II has confirmed it was the victim of a cyber attack after notorious hacking group ShinyHunters posted a ransom demand on its darknet leak site. The hackers listed Rockstar Games as a victim in an 11 April update,...

Anime streaming service Crunchyroll has confirmed that it suffered a cyber attack, with hackers claiming to have breached a third-party vendor’s internal network and accessed user data. Earlier this week, reports suggesting that threat actors had...

information, phone numbers, and physical addresses – was posted as punishment for the arrests of hackers with links to ShinyHunters and IntelBroker. 5. Bouygues Telecom France’s third-largest telco disclosed it had fallen victim to a cyber attack in...

Identity protection firm Aura has disclosed details of a phishing attack after the company was listed as a victim of the ShinyHunters cyber extortion group earlier this month. “Aura is aware of an incident where one of our employees was the victim of a...

hundreds of companies via their Salesforce instances. Here’s what you can do to protect yours. Since late last year, the ShinyHunters group has been targeting a raft of companies via their Salesforce instances, stealing data and extorting victims before...

physical and IP addresses, and auto finance application outcomes.” According to the report, infamous hacking group ShinyHunters is behind the incident, citing a mid-February report that found the group claimed a breach of CarGurus, which saw 1.7 million...

of misinformation regarding the tragic Bondi terror attack, OpenAI’s admission of “high cyber risk”, the re-emergence of ShinyHunters with a string of possible extortion attempts, ransomware attacks on medical centres, and important tips for using...

is still unconfirmed, sources speaking with security publication BleepingComputer have suggested that the infamous ShinyHunters group is to blame. The source told the publication that ShinyHunters is currently extorting SoundCloud after claiming to have...

the group began an extortion campaign targeting Mixpanel customers last week. “In an extortion demand sent to PornHub, ShinyHunters claims it stole 94GB of data containing over 200 million records of personal information in the Mixpanel breach,”...

Security researchers believe Qantas and Salesforce hackers could be in the middle of a campaign targeting users of the popular help desk platform. Whether you think they’re one of the most dire cyber threats around today, or just a bunch of spoiled...

because their members operate within and across them,” Beek said. “We believe, however, that the names Lapsus$ and ShinyHunters are being abused as a ‘marketing brand’ rather than representing the original groups in action. This is because Lapsus$ has...

10 October Scattered Lapsus$ Hunters shared a PGP-signed message from an individual claiming to be or to represent ShinyHunters soon after the takedown, stating that BreachForums was now officially dead. “BreachForums was seized by the FBI and...

and has been engaging in a widespread extortion campaign targeting users of the Oracle E-Business Suite platform, ShinyHunters and its various linked hacking collectives are also involved in the hacking campaign. “In early October 2025 ‘SCATTERED...

appears to be a relatively new victim, reporting from DataBreaches.net noted that Kering was revealed as a victim of a ShinyHunters attack some time in 2024. “When did Balenciaga, Brioni, Alexander McQueen or Kering first discover this breach, and how...