ShinyHunters Claim Ryan, LLC Salesforce Data Compromise

Summary
ShinyHunters claim they compromised more than 4.8 million Ryan, LLC Salesforce records containing PII and internal data, and threaten to leak it unless contacted by April 14, 2026. The claim is unconfirmed.
Key points
- ShinyHunters claim more than 4.8 million Salesforce records belonging to Ryan, LLC were compromised.
- The group says the records contain PII and internal corporate data.
- The claim includes a “pay or leak” demand and a deadline to contact the group by April 14, 2026.
- The post says the information is based on public group claims and that it cannot confirm their accuracy.
Article Details
- Victim
- Ryan, LLC
- Claim Date
- 2026-04-11
- Encryption Status
- Unknown
- Exfiltration Status
- Claimed by shinyhunters; not independently confirmed
- Exfiltrated Data
- shinyhunters claims that Salesforce records containing PII and other internal corporate data were compromised
- Ransom Demand
- “Pay or leak”; no amount reported
- Leak Status
- Leak threatened if payment is not made; no leak is confirmed
