shinyhunters11 articles
ShinyHunters Arrests Mount as AI Finds Bugs Humans Would Miss
The FBI has made what appears to be a third arrest connected to the ShinyHunters cybercrime group, following the crew's breach of FBI systems, with at least one suspect reportedly arrested on US soil. ShinyHunters, an English-speaking group estimated to have extorted around $70 million in the past year, claimed the hack was reputationally motivated rather than financial. Meanwhile, Anthropic's AI model Mythos has discovered a second vulnerability — a complex authentication bypass in open-source software — that was promptly exploited in the wild, raising questions about whether AI is shifting the balance of power between attackers and defenders in cybersecurity.
Ransomware Negotiator Arrested in FBI's Expanding ShinyHunters Crackdown
A Canada-based cybersecurity expert specializing in ransomware response, identified as Edward Dubrovsky, has been arrested in the United States as a suspected member of the ShinyHunters hacking group, which recently breached FBI systems and obtained data on nearly all agents and job applicants. He was arrested after traveling to Philadelphia for a conference and faces charges including conspiracy to extort and interference with commerce by threats. This is the third ShinyHunters arrest in recent weeks as the FBI works to dismantle the group, with two other alleged key members detained in the Netherlands and Jordan respectively.
Third ShinyHunters Suspect Arrested as FBI Slowly Dismantles Group That Hacked Its Own Jobs Portal
The FBI has arrested a third suspected ShinyHunters co-conspirator, a Canadian citizen apprehended in Pennsylvania, following earlier arrests in the Netherlands and Jordan related to the group's breach of the FBI's jobs portal. The hack, announced by ShinyHunters in September, exposed sensitive personal, medical, and employment data on FBI agents and applicants, and reportedly resulted from a contractor's failure to apply a security patch to a PeopleSoft platform managed by Accenture. FBI Director Kash Patel has vowed to continue pursuing remaining members of the group, which the FBI alleges has breached over 140 organisations and extorted at least $70 million since last year.
FBI Boots Accenture Contractor After ShinyHunters Breach Traced to Unpatched System
The FBI removed an Accenture contractor following a data breach by the ShinyHunters cybercrime group, which exploited an unpatched vulnerability in Oracle's PeopleSoft HR platform to access personal information of thousands of bureau employees. FBI cyber chief Brett Leatherman confirmed the breach resulted from the contractor's failure to apply a security patch issued to secure the system. ShinyHunters claimed the attack was intended to pressure the FBI over a report the group alleged contained false information about them, though law enforcement has since arrested two alleged leaders of the group.
FBI Boots Accenture Contractor Over Unpatched System That Handed ShinyHunters Thousands of Agent Records
The FBI has removed an Accenture contractor following a data breach by the hacking group ShinyHunters, which exploited an unpatched vulnerability in an Oracle PeopleSoft platform to steal personal details of thousands of FBI employees. The contractor failed to apply a security patch that had been explicitly issued to secure the platform. Two ShinyHunters members have already been arrested, and the FBI has warned that further arrests are likely as its investigation continues.
Trezor's Shipping Partner Kept Data It Promised to Delete. 67,000 Customers Are Now Paying the Price.
Trezor has disclosed that a breach at its shipping provider ShipMonk exposed the personal data of 67,000 U.S. customers, including names, addresses, phone numbers, and order details from 2019–2021 — data Trezor had repeatedly been assured was deleted. The breach stemmed from a zero-day SQL injection vulnerability (CVE-2026-72898) in Metabase, with the ShinyHunters extortion gang reportedly responsible. While the hardware wallets themselves remain secure, Trezor has warned affected customers to be vigilant against phishing, scam calls, and social engineering attacks exploiting the leaked information.
ShinyHunters Padded the Carhartt Breach With Millions of Fake Records
Carhartt suffered a data breach affecting approximately 12.9 million individuals — roughly half the 25 million claimed by hacking group ShinyHunters, which had padded the dataset with millions of lines of synthetic data. Troy Hunt of Have I Been Pwned uncovered the inflation through careful analysis, using tools to identify fake email domains, implausible demographics, and other anomalies before arriving at the genuine figure. The real breach exposed names, email addresses, phone numbers, and physical addresses, with Carhartt yet to publicly comment on the incident.
ShinyHunters Turns Up the Heat on Ernst & Young After Tax Data Breach
Ernst & Young (EY) suffered a data breach between March 28 and April 12, in which hackers stole sensitive client information — including Social Security numbers, account numbers, and tax-related documents — from a third-party service management platform. The notorious extortion group ShinyHunters has since claimed responsibility, adding EY to its leak site and threatening to release the stolen data if the firm does not make contact by July 31. EY has not disclosed the number of affected individuals or confirmed the attacker's identity, but is offering impacted clients 24 months of free credit monitoring and identity protection services.
ShinyHunters Dumps 41GB of Brinks Home Data After Ransom Goes Unpaid
Brinks Home, a Dallas-based home security firm, has suffered a data breach carried out by the ShinyHunters extortion group, who claim to have stolen over 4.9 million records from the company's Salesforce instance. After Brinks Home refused to pay a ransom, the hackers leaked more than 41GB of files online, which allegedly include personally identifiable information (PII). The company has confirmed the breach but stated that its alarm monitoring and core security systems were not affected, and is working to identify impacted individuals.
ShinyHunters Breach Exposes Data of 3.8 Million Medtronic Patients
Medical technology company Medtronic suffered a data breach in April 2026 when the extortion group ShinyHunters accessed its corporate IT systems, compromising the personal and medical information of over 3.8 million individuals. Stolen data included names, contact details, dates of birth, Social Security numbers, and health-related information, though Medtronic states there is no evidence the data was publicly exposed. The company is offering affected individuals 24 months of free credit monitoring and identity theft protection services, and has implemented additional cybersecurity safeguards.
Medtronic Tells Patients Their Health Data May Have Walked Out the Door in April Breach
Medtronic is notifying patients that their personal and health data — including names, Social Security numbers, and medical information — may have been stolen during a cyberattack in which unauthorised actors accessed its corporate systems for nearly a week in April. The extortion group ShinyHunters claimed responsibility, alleging it stole over nine million records and demanding a ransom, though Medtronic has not publicly attributed the attack or confirmed whether data was actually exfiltrated. The company states that no medical devices were affected and is offering impacted individuals two years of complimentary credit and identity monitoring services.