ShinyHunters Claims Theft of 3.1TB of NAIC Data, Threatens Leak
Summary
A ransomware.live-monitored post attributes an unverified claim to ShinyHunters: more than 3.1TB of data was taken from NAIC[.]org, with a threatened leak unless the organization contacts the group by June 22, 2026.
Key points
- The post attributes the claim to ShinyHunters and says more than 3.1TB of data across over 105,000 files was compromised.
- Allegedly affected material includes insurer regulatory filings, statistical CSVs, rating-agency files, financial statements, and HR ratings data.
- The post says the data includes federal EINs and CUSIP and ISIN identifiers.
- ShinyHunters reportedly issued a final warning to contact the group by June 22, 2026, or face a leak and possible digital disruption.
- The claim is unconfirmed; the post says it is based on public claims by the group.
Article Details
- Victim
- NAIC.org
- Victim Domain
- NAIC.org
- Encryption Status
- Unknown
- Exfiltration Status
- Claimed by shinyhunters; unverified
- Exfiltrated Data
- The article reports a claim that data from NAIC and related insurance systems was compromised or taken, including insurer regulatory filing PDFs, quarterly statistical CSV files containing federal EINs and company data, licensed rating agency files with CUSIP and ISIN identifiers, financial statements, premium and loss statistics, and HR Ratings master data. The source states it cannot confirm the claim.
- Exfiltrated Size
- More than 3.1 TB claimed; unverified
- Ransom Demand
- No ransom amount disclosed. The actor reportedly warned NAIC to make contact by 2026-06-22.
- Leak Status
- Leak threatened if contact is not made by 2026-06-22; the article does not report that the data has been published.
Threat Actors
Products
EDP3.1TB of data across its INSData statistical platform, Vision credit rating feeds, SERFF, OPTINS, UCAA, EDP, RDC, and state insurance department reporting systems, including 105,000+ files (2.1M insurer regulatoryINSDataNAIC.org in the US reports more than 3.1TB of data across its INSData statistical platform, Vision credit rating feeds, SERFF, OPTINS, UCAA, EDP, RDC, and state insurance department reporting systems, including 105,000+OPTinsmore than 3.1TB of data across its INSData statistical platform, Vision credit rating feeds, SERFF, OPTINS, UCAA, EDP, RDC, and state insurance department reporting systems, including 105,000+ files (2.1M insurerRDCof data across its INSData statistical platform, Vision credit rating feeds, SERFF, OPTINS, UCAA, EDP, RDC, and state insurance department reporting systems, including 105,000+ files (2.1M insurer regulatory filingSERFFUS reports more than 3.1TB of data across its INSData statistical platform, Vision credit rating feeds, SERFF, OPTINS, UCAA, EDP, RDC, and state insurance department reporting systems, including 105,000+ files (2.1MUCAAthan 3.1TB of data across its INSData statistical platform, Vision credit rating feeds, SERFF, OPTINS, UCAA, EDP, RDC, and state insurance department reporting systems, including 105,000+ files (2.1M insurerVisionNAIC.org in the US reports more than 3.1TB of data across its INSData statistical platform, Vision credit rating feeds, SERFF, OPTINS, UCAA, EDP, RDC, and state insurance department reporting systems, including 105,000+