ShinyHunters Claims American Tower Data Exposure, Including Tower Access Codes

Summary
A ransomware.live monitoring entry attributes to shinyhunters an unverified claim that American Tower data, including over 5.2 million records and tower access codes, was exposed. The group set a 15 June 2026 contact deadline.
Key points
- The monitoring entry names American Tower Corporation as the victim and shinyhunters as the actor.
- The entry attributes to shinyhunters a claim that over 5.2 million records, including customer and landowner PII, were exposed.
- The claim also describes third-party records involving T-Mobile, Verizon and the US DHS, plus tower GPS data and plaintext physical access or gate codes.
- The group reportedly issued a final warning to make contact by 15 June 2026 to avoid publication and further disruption.
- The monitoring entry says the claims are unconfirmed; the supplied content gives no independent verification.
Article Details
- Victim
- American Tower Corporation
- Claim Date
- 2026-06-12
- Encryption Status
- Unknown
- Exfiltration Status
- Claimed; unverified
- Exfiltrated Data
- The post attributes claims to shinyhunters that customer and landowner PII, internal corporate records, third-party records involving T-Mobile, Verizon, and US DHS, and tower asset records containing GPS data and plaintext physical access/gate codes were compromised or exposed. The source says it cannot confirm the claims.
- Exfiltrated Size
- Over 5.2 million records (claimed; unverified)
- Ransom Demand
- The post says the group warned the victim to pay or risk a leak, but gives no amount.
- Leak Status
- Publication was threatened by 15 June 2026; no publication is confirmed in the source.
