shinyhunters

Florida's DMV (FLHSMV) suffered a major data breach after a local law enforcement employee insecurely stored login credentials, with the cybercriminal group ShinyHunters allegedly stealing personal data of current and former Florida residents.

美国联邦调查人员怀疑一家勒索谈判公司的高管协助ShinyHunters运营勒索网站，随着FBI招聘网站被入侵及多名嫌疑人被捕，该勒索集团的调查正加速推进。

FBI已逮捕加拿大网络安全公司Cypfer联合创始人Edward Dubrovsky，其涉嫌协助窃取FBI敏感数据的ShinyHunters黑客组织，被控网络勒索与共谋罪。

Troy Hunt's Weekly Update 524 covers two ShinyHunters-related arrests (Pepijn in the Netherlands and Saif in Jordan), reflecting the inevitable legal crackdown on the long-running cybercrime group, and introduces new blog sponsor Origin, an AI agent visibility and endpoint security tool.

Dutch police arrested a suspected leader of the ShinyHunters hacking group, linked to attacks on the FBI, Ticketmaster, and other organizations. The arrest is part of an ongoing international investigation into the group's activities.

Troy Hunt's weekly update from a Norwegian fjord covers ShinyHunters' trajectory targeting Cl0p and the FBI, and introduces Origin as a sponsor for AI agent monitoring tooling.

Hackers from ShinyHunters claim to have breached FBI systems, stealing data on all FBI employees and applicants, with potential national security implications.

A critical PeopleSoft zero-day vulnerability is being actively exploited by the ShinyHunters group, compromising hundreds of organizations and stealing gigabytes of data, including 48GB from a single victim.

Troy Hunt discusses the ongoing ShinyHunters data breaches and dumps, noting the criminality, organizational responses, and the seemingly endless cycle of new victims appearing, such as DentaQuest and BCD Travel.

Troy Hunt's weekly update reports that the ShinyHunters hacking group has resurfaced with new claims against DentaQuest and Charter Communications after a brief silence following the Instructure ransom payment.

Instructure paid a ransom to the ShinyHunters cybercrime group after two breaches of its Canvas learning management system, resulting in the return of compromised data from 275 million users.

Troy Hunt's weekly update covers Instructure's 'pay or leak' deadline from ShinyHunters, with the company remaining silent and lawsuits being prepared.

A cybercrime group defaced Canvas's login page with a ransom demand after a data breach, disrupting schools and universities nationwide. The stolen data includes names, emails, and student IDs, with threats to leak data unless paid.

Troy Hunt's weekly update discusses how ShinyHunters uses social engineering and vishing to breach major brands, with insights from Mandiant.

Vercel has confirmed an intrusion by the hacker group ShinyHunters, who are openly selling core source code, internal database access, and secrets for $2 million. All Vercel users should immediately review and rotate environment variables and related keys.