CVE-2026-35273 last week – but hackers had already been exploiting it for almost two weeks. The cyber extortion group ShinyHunters is a past master at taking advantage of vulnerabilities in widely used platforms, and according to recent reporting from...

for all the wrong reasons over the last seven or so days, following a comprehensive breach of its Canvas platform by the ShinyHunters cyber extortion group. Millions of students and educators have had their personal details compromised, and the Canvas...

were involved. If that changes, we will notify any impacted institutions.” While Instructure confirmed the breach, the ShinyHunters cyber extortion group claimed responsibility, with the hackers saying they had compromised more than 200 million students...

for more information. The fight for attribution – Qilin or ShinyHunters? The incident was first claimed by the infamous ShinyHunters threat group on 1 May. In the listing, the group said it stole 500,000 Salesforce records, including internal corporate...

hundreds of companies via their Salesforce instances. Here’s what you can do to protect yours. Since late last year, the ShinyHunters group has been targeting a raft of companies via their Salesforce instances, stealing data and extorting victims before...

have 1.3 terabytes of customer data stolen from the entertainment giant, as Home Affairs confirms it is on the case. The ShinyHunters hacking group has shared the details of an alleged hack of Ticketmaster and Live Nation and is selling the data for a...

An individual claiming to be the infamous hacker ShinyHunters has said that the old domain is no longer under their control. The previous administrator of popular clear web hacking community BreachForums has said the forum’s previous domain is...

lacks intelligence. The big hacking news this week is the formation of a possible hacking super group, as the notorious ShinyHunters and Scattered Spider collectives merge. Is this the real deal, and a threat to companies around the globe, or just...

have been caught up in a global IT breach, with possibly lifelong impacts for students. Between 3 and 5 May 2026, the ShinyHunters cyber extortion group claimed responsibility for a data breach of cloud education provider Instructure and its Canvas...

on 3 September, which matches the time frame of the recent email. According to DataBreaches, a known threat actor called ShinyHunters – which takes its name from a Pokemon game – was behind the breach, admitting to the site that they accessed Pizza...

Nissan pins employee data breach on Oracle PeopleSoft zero-day as ShinyHunters hacking spree continues. Car maker Nissan began informing current and former employees late last week of a data breach driven by a vulnerability in the software used to...

the incident is unknown, CyberCX executive director Katherine Mansted has raised the possibility that the infamous ShinyHunters hacking group is behind the attack. “It’s open cyber season on luxury retail brands globally,” she said. “The Louis Vuitton...

Financially motivated hackers linked to ShinyHunters have been observed using social engineering techniques to gain access to victim networks via a popular customer service and sales platform. A hacking group with intimate knowledge of the Salesforce...

announcing a new dark website for the forum. As seen on a BreachForums announcement Telegram page, the forum’s admin, ShinyHunters (Shiny), has announced that the platform has a new onion address. “Still under testing. Please report any bugs you may...

and adidas. So far, the threat actors have not released any data publicly, only resorting to email extortion. However, ShinyHunters has confirmed with BleepingComputer that it is privately contacting these companies for ransom payments and that it will...

the group began an extortion campaign targeting Mixpanel customers last week. “In an extortion demand sent to PornHub, ShinyHunters claims it stole 94GB of data containing over 200 million records of personal information in the Mixpanel breach,”...

will officially reopen on July 1st. “First, thank you to those who choose to return and rebuild. But let’s be clear: ShinyHunters and IntelBroker have been arrested. With them, the servers and database were seized, now in the hands of US and French...

— is facing a range of charges, including wire fraud and aggravated identity theft. Sebastien Raoult was a member of the ShinyHunters hacking group where he operated under the nom de guerre Seyzo Kaizen. Raoult was attempting to travel to Brussels when...

– which owns luxury brands such as Gucci, Balenciaga, and Alexander McQueen – was recently revealed as a victim of a ShinyHunters attack some time in 2024. “When did Balenciaga, Brioni, Alexander McQueen or Kering first discover this breach, and how did...

that “certain data” may have been accessed without authorisation. Then, only a week later, cyber extortionist group ShinyHunters claimed it had stolen more than 200,000 licence scans from the US state of Florida’s Driver and Vehicle Information...