ShinyHunters Claim Council of Europe Data Theft, Threaten Leak
Summary
A ransomware.live monitoring post attributes to ShinyHunters a claim of stealing over 297 GB of Council of Europe data and threatens publication unless the organization makes contact by June 16, 2026. The claims are unconfirmed.
Key points
- The monitoring post names the Council of Europe as the victim and attributes the ransomware/extortion claim to ShinyHunters.
- The group claims to have taken over 297 GB of data across more than 429,000 files.
- The claimed material includes more than 409,000 payslips, 14,000+ CVs, personnel files, and employee document stores.
- The post says the data includes personal, payroll, financial, tax, social security, and medical or absence information.
- ShinyHunters reportedly set a June 16, 2026 contact deadline and threatened publication and possible digital disruption.
- The post states that the group's claims are unconfirmed; it includes no official statement from the Council of Europe.
Article Details
- Victim
- Council of Europe
- Victim Domain
- coe.int
- Claim Date
- 2026-06-14
- Encryption Status
- Unknown; the source does not report whether data was encrypted.
- Exfiltration Status
- Claimed by shinyhunters; not independently confirmed.
- Exfiltrated Data
- shinyhunters claimed that Council of Europe HR, payroll, and other internal records were compromised or taken. The source describes the data as exposed but also says publication was threatened; the claims and data authenticity are unverified.
- Exfiltrated Size
- Over 297 GB, claimed and unverified.
- Ransom Demand
- Not disclosed; the source says demands were not met but provides no amount.
- Leak Status
- The group issued a final warning to make contact by 2026-06-16 to avoid publication. The source also describes data as exposed or leaked, but does not independently verify publication or the data.