ShinyHunters Claims Aman Resorts Data Extortion, Threatens Leak
Summary
ShinyHunters claims Aman Resorts has over 500,000 Salesforce records containing PII and threatens to leak them unless contacted by April 21, 2026. The claim is unverified.
Key points
- ShinyHunters claims over 500,000 Salesforce records containing PII from Aman Resorts were compromised; this is not independently confirmed.
- The claim demands payment or threatens to leak the data.
- The group reportedly gave Aman Resorts until April 21, 2026, to make contact and also threatened digital disruption.
- The record is attributed to public claims by ShinyHunters and says it is monitored by ransomware[.]live.
Article Details
- Victim
- Aman Resorts
- Victim Domain
- aman.com
- Claim Date
- 2026-04-18
- Encryption Status
- Unknown; the source does not report encryption.
- Exfiltration Status
- Claimed by shinyhunters, but unverified; the source provides no independent confirmation.
- Exfiltrated Data
- shinyhunters claims that more than 500,000 Salesforce records containing PII were compromised.
- Ransom Demand
- Pay-or-leak demand; no amount is reported.
- Leak Status
- Threatened; shinyhunters warned that the data would be leaked if payment was not made. No publication is reported.