hundreds of companies via their Salesforce instances. Here’s what you can do to protect yours. Since late last year, the ShinyHunters group has been targeting a raft of companies via their Salesforce instances, stealing data and extorting victims before...

physical and IP addresses, and auto finance application outcomes.” According to the report, infamous hacking group ShinyHunters is behind the incident, citing a mid-February report that found the group claimed a breach of CarGurus, which saw 1.7 million...

of misinformation regarding the tragic Bondi terror attack, OpenAI’s admission of “high cyber risk”, the re-emergence of ShinyHunters with a string of possible extortion attempts, ransomware attacks on medical centres, and important tips for using...

is still unconfirmed, sources speaking with security publication BleepingComputer have suggested that the infamous ShinyHunters group is to blame. The source told the publication that ShinyHunters is currently extorting SoundCloud after claiming to have...

and scope of the reported incident.” The hackers emerge Now, perhaps unsurprisingly, the group behind the attack is ShinyHunters, the same group linked to hacking super team Scattered Lapsus$ Hunters, which in turn was behind this year’s Qantas hack and...

that aside, the loose structure of the group – thought to be an amalgamation of three similarly loose hacking groups: ShinyHunters, Lapsus$, and Scattered Spider – makes attribution difficult. “Looking ahead, ReliaQuest expects Scattered Lapsus$ Hunters...

because their members operate within and across them,” Beek said. “We believe, however, that the names Lapsus$ and ShinyHunters are being abused as a ‘marketing brand’ rather than representing the original groups in action. This is because Lapsus$ has...

10 October Scattered Lapsus$ Hunters shared a PGP-signed message from an individual claiming to be or to represent ShinyHunters soon after the takedown, stating that BreachForums was now officially dead. “BreachForums was seized by the FBI and...

and has been engaging in a widespread extortion campaign targeting users of the Oracle E-Business Suite platform, ShinyHunters and its various linked hacking collectives are also involved in the hacking campaign. “In early October 2025 ‘SCATTERED...

appears to be a relatively new victim, reporting from DataBreaches.net noted that Kering was revealed as a victim of a ShinyHunters attack some time in 2024. “When did Balenciaga, Brioni, Alexander McQueen or Kering first discover this breach, and how...

illusions they have gotten the situation under control?” The listed airlines were all thought to have been victims of ShinyHunters, alongside Australia’s own national carrier, Qantas, while Kering appears to be a relatively new victim. According to...

known as Scattered Spider may be behind the attack, though later investigations have pointed to a different group, ShinyHunters. In total, nearly 6 million customers were thought to be affected. Mullen also noted the $90 million fine and $120 million...

and Salesloft Drift pending further investigation,” Google said. There is evidence that the Scattered Spider and ShinyHunters collectives, which appear to have formed some kind of loose hacking alliance, may be behind the hacking campaign. According to...

third-party organisation in question was Salesforce, linking the attack to the wave of cyber attacks performed by the ShinyHunters threat group, potentially even the new Scattered Lapsus$ Hunters hacking supergroup. BleepingComputer said that...

lacks intelligence. The big hacking news this week is the formation of a possible hacking super group, as the notorious ShinyHunters and Scattered Spider collectives merge. Is this the real deal, and a threat to companies around the globe, or just...

Notorious hacking group ShinyHunters has confirmed that it is working with infamous hacking collective Scattered Spider, alongside Lapsus$, and has teased a massive number of leaks following its major Salesforce hacking campaign. ShinyHunters revealed...

impact analysis and bolstered its security. Google Threat Intelligence identified the group as UNC6040, better known as ShinyHunters, which BleepingComputer has already identified as having been behind a widespread Salesforce instance campaign....

of the Cyber Uncut podcast, David Hollingworth and Daniel Croft discuss the future of AI and copyright in Australia, ShinyHunters and their relationship to the Scattered Spider hacking collective, and a new ransomware operator targeting small businesses...

to BleepingComputer, the threat actor behind the Salesforce breach, which has affected a number of organisations now, is ShinyHunters. The group has been using phishing and social engineering to gain access to credentials and accounts, before stealing...

there, the Salesforce databases are downloaded and held to ransom. The publication also identified the threat actor as ShinyHunters, the group that has been launching these Salesforce data breaches, adding that the same group breached Allianz Life,...