24-Year-Old Arrested in Dutch Investigation Into #ShinyHunters
https://securityaffairs.com/199979/cyber-crime/24-year-old-arrested-in-dutch-investigation-into-shinyhunters.html
#securityaffairs #hacking #OpenAI #AI
#shinyhunters
18 posts · Last used 9d
Boosted by @trending@homestead.social
Exclusive, breaking: Dutch Police Arrest "Reformed" Hacker in ShinyHunters investigation
Authorities in the Netherlands have arrested a 23-year-old convicted cybercriminal on suspicion of aiding in data thefts and extortions by the prolific hacker group ShinyHunters. In the days immediately following the suspect’s arrest, remaining ShinyHunters members dramatically escalated their attacks, stealing highly sensitive data from the FBI and extorting the Russian ransomware group Cl0p.
https://krebsonsecurity.com/2026/09/dutch-police-arrest-reformed-hacker-in-shiny-hunters-investigation/
#shinyhunters #cybercrime
The FBI ShinyHunters breach may expose staff of the FBI's Remote Operations Unit hacking team, via a claimed Oracle PeopleSoft zero-day. FBI confirms probe.
#FBI #ShinyHunters #RemoteOperationsUnit #DataBreach #PeopleSoft #CyberSecurity
https://meterpreter.org/fbi-breach-shinyhunters-remote-operations-unit/?utm_source=mastodon&utm_medium=jetpack_social
In today's Breach Please, @malwarejake@infosec.exchange and I talk about how Shiny Hunters got into the FBI through an unpatched Oracle PeopleSoft O-day, walking out with employee, applicant, and family data from AWS GovCloud.
Plus: technical debt, the case for just patching, and a PR moment involving two dogs.
Ep 39 of Breach Please:
YouTube: https://www.youtube.com/watch?v=GKhVFA3Ji88
#Cybersecurity #InfoSec #DataBreach #Oracle #shinyhunters #fbi
Sept 23, 2026 - S0:E39: FBI Breach, Shiny Hunters' Oracle O-Day, and a PR Fail With Dogs
ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants
#ShinyHuntershttps://thehackernews.com/2026/09/shinyhunters-claims-fbi-breach-says-it.html
So, ShinyHunters just breached FBI and defaced FBI Jobs site.
Around 5000 employees data, and allegedly 3TB datas in total managed to be taken.
The group said they used unpatched Oracle PeopleSoft zero-day.
Sources: @InternationalCyberDigest@infosec.exchange , @BleepingComputer@infosec.exchange and @404mediaco@mastodon.social
Video source: vx-underground
#cybersecurity #infosec #fbi #databreach #shinyhunters #defaced
Replying to
@InternationalCyberDigest@infosec.exchange @BleepingComputer@infosec.exchange @404mediaco@mastodon.social
The official statement from ShinyHunters leak site
Source: vxdb
#cybersecurity #infosec #fbi #databreach #shinyhunters #defaced
NEW by me:
ShinyHunters escalates dispute with FBI; claims to have seized job applicants' site and acquired data
First, they threatened Clop this week, and now the FBI.
Some will disagree with me strongly, but I actually agree with ShinyHunters on some of their objections to a May 2026 FBI bulletin about them. That still doesn't excuse them hacking and extorting them, of course.
https://databreaches.net/2026/09/22/shinyhunters-escalates-dispute-with-fbi-claims-to-have-seized-job-applicants-site-and-acquired-data/
#databreach #govsec #cybersecurity #extortion #ShinyHunters #FBI #Cl0p
Replying to
If you're among the 23 million, review your breach notification, check HaveIBeenPwned, and enroll in identity protection services immediately.
Reward: You've received a complimentary Cavity Search — performed remotely, without anesthesia.
#DataBreach #CyberSecurity #DentaQuest #ShinyHunters #HealthcareHack #AchievementUnlocked (3/3)
Healthcare giant Abbott probes two cyber incidents amid extortion claims
#ShinyHuntershttps://www.malwarebytes.com/blog/data-breaches/2026/07/healthcare-giant-abbott-probes-two-cyber-incidents-amid-extortion-claims
#Medtronic Notifies 3.8 Million After #ShinyHunters Data Breach
https://securityaffairs.com/194788/cyber-crime/medtronic-notifies-3-8-million-after-shinyhunters-data-breach.html
#securityaffairs #hacking
NAIC, the U.S. insurance regulator, disclosed a #databreach after #ShinyHunters exploited the #Oracle PeopleSoft zero-day (CVE-2026-35273). NAIC said the attackers accessed only public reports, outdated logs, and configuration files,
https://www.bleepingcomputer.com/news/security/naic-says-public-data-stolen-in-shinyhunters-peoplesoft-breach/
Boosted by @oxy@social.bsdlab.au
⚠️ ShinyHunters claims it hacked 100 orgs by exploiting an Oracle PeopleSoft 0-day
｢ A spokesperson for the cybercrime crew on Thursday told The Register that they exploited CVE-2026-35273 to break into the university’s PeopleSoft system and steal 40 GB of personal data and billing records belonging to hundreds of thousands of current and former students ｣
https://www.theregister.com/cyber-crime/2026/06/11/shinyhunters-claims-oracle-peoplesoft-0-day-hit-100-orgs/5254443
#ShinyHunters #PeopleSoft #oracle #CVE202635273
Chicago Sun-Times - All | U. of I. reschedules finals after learning platform Canvas reaches deal with hackers by AP
AI generated summary, Read the full article for complete information.
The University of Illinois Urbana‑Champaign postponed its final exams from Friday to Sunday (Mother’s Day) after the Canvas learning platform’s owner, Instructure, announced it had reached an agreement with the hackers who breached the system. Instructure temporarily shut down Canvas for investigation, locking out students and faculty, and later claimed the attackers deleted the stolen data and “shred logs” confirmed the erasure, though no guarantee was given that all copies were eliminated. The breach exposed student IDs, names, emails and messages, but not passwords or financial information. The university warned of heightened phishing risks and said the rescheduling, though imperfect, was the best of several problematic options.
Read more: https://chicago.suntimes.com/education/2026/05/12/u-of-i-reschedules-finals-canvas-hack-deal
#JohnColeman #UniversityIllinois #Instructure #Canvas #ShinyHunters #Urbana_Champaign #
BBC News | Canvas hack: Company pays criminals to delete students' stolen data
AI generated summary, Read the full article for complete information.
The makers of Canvas, the learning‑management platform used by thousands of universities, confirmed that after a massive hack—affecting roughly 9,000 institutions in the US, Canada, Australia and the UK and disrupting exams—they reached an agreement with the extortion group Shiny Hunters, who claimed to have stolen 3.5 TB of student and university data. Instructure says the hackers deleted the data, provided digital confirmation of its destruction, and promised no further extortion of its customers, although the exact terms and any payment remain undisclosed. While paying cyber‑criminals is generally discouraged because it can encourage more attacks and offers no guarantee the data is truly gone, Instructure emphasized protecting students and staff as its primary motive and highlighted its transparency in updating the public throughout the incident, which also saw ransom notes appear on students’ screens during exams and caused significant disruption to coursework.
Read more: https://www.bbc.com/news/articles/cdepzg83x87o?at_medium=RSS&at_campaign=rss
#Instructure #ShinyHunters #Canvas #AubreyPalmer
Instructure has confirmed a data breach, exposing sensitive user data including student IDs and private messages. This marks the second time in under a year that the notorious ShinyHunters group has claimed an attack on the EdTech giant. While Instructure's confirmed scope is smaller, ShinyHunters alleges a staggering 275 million individuals and billions of private messages were…
https://www.tpp.blog/1x31kbg
#cybersecurity #instructure #shinyhunters
🤖 This post was AI-generated.
ADT has confirmed yet another data breach, with the ShinyHunters group claiming to have exposed millions of customer records including PII. This incident isn't just a one-off; it points to a systemic problem, potentially stemming from social engineering tactics like vishing and compromised SSO accounts into SaaS platforms like Salesforce. The real concern? Data entrusted to a security provider can…
https://www.tpp.blog/vwuqge5
#cybersecurity #adt #shinyhunters
🤖 This post was AI-generated.
You've seen all posts