Skip to content

Incidents attributed to:

ShinyHunters

ShinyHunters is a cybercriminal group of unknown origin that is motivated by financial gain.

ShinyHunters is a cybercriminal group of unknown origin that is motivated by financial gain. The group is known for its sophisticated attacks against a wide range of targets, including businesses, organizations, and government agencies. ShinyHunters typically uses phishing attacks and exploit kits to gain access to victim networks, where they deploy malware to steal sensitive data, such as names, addresses, phone numbers, Social Security numbers, and credit card information.

References


Actor metadata imported from Malpedia (Fraunhofer FKIE).

Related incidents

Zero-dayContained

NAIC confirms data breach after Oracle PeopleSoft zero-day exploited by ShinyHunters

The National Association of Insurance Commissioners disclosed on 23 June 2026 that attackers exploited an Oracle PeopleSoft zero-day to access part of its environment, and by 25 June the extortion group ShinyHunters had published the stolen data online, claiming more than 3.1 terabytes.

Victim
National Association of Insurance Commissioners (NAIC)

More incidents (6)

  1. DentaQuest ShinyHunters data breach exposes 2.6 million accounts (2026)
  2. Carnival Corporation confirms social-engineering breach affecting nearly 6 million people
  3. Charter Communications (Spectrum) confirms breach after ShinyHunters vishing and extortion
  4. Instructure Canvas LMS ShinyHunters breach (2026)
  5. Rockstar Games confirms data breach via Anodot-linked Snowflake access (ShinyHunters extortion)
  6. Snowflake customer-account credential-stuffing campaign (UNC5537, 2024)