ShinyHunters Claims to Have Exfiltrated ZenBusiness Data
Summary
A ransomware.live-monitored post attributes to ShinyHunters a claim that several terabytes of ZenBusiness data were taken from Snowflake, Mixpanel, Salesforce and related services. The group issued a deadline of March 30, 2026; the claim is unconfirmed.
Key points
- The post names ZenBusiness, Inc. as the alleged victim and ShinyHunters as the actor.
- ShinyHunters claims several terabytes were exfiltrated from Snowflake, Mixpanel, Salesforce and related services; this is not independently confirmed.
- The group issued a final warning urging ZenBusiness to respond by March 30, 2026, and threatened data leakage and further digital disruption.
- The notice was updated on March 26, 2026, and is attributed to public claims monitored by ransomware.live.
- The source says it cannot confirm the accuracy of the group's claims and invites an official statement from ZenBusiness.
Article Details
- Victim
- ZenBusiness, Inc.
- Claim Date
- 2026-03-26
- Encryption Status
- Unknown; the source does not report whether data was encrypted.
- Exfiltration Status
- Claimed by shinyhunters; not independently confirmed.
- Exfiltrated Data
- The group claimed data from Snowflake, Mixpanel, Salesforce, and related services was compromised.
- Exfiltrated Size
- Several terabytes, according to the group claim; unverified.
- Ransom Demand
- Not disclosed.
- Leak Status
- Threatened, not reported as leaked. The group warned it would leak data and cause further digital disruptions unless contacted by 30 Mar 2026.
Threat Actors
Products
MixpanelZenBusiness, Inc., based in the United States, reports a ransomware claim attributed to the threat actor shinyhunters, with several terabytes exfiltrated from Snowflake, Mixpanel, Salesforce, and related services.SalesforceZenBusiness, Inc., based in the United States, reports a ransomware claim attributed to the threat actor shinyhunters, with several terabytes exfiltrated from Snowflake, Mixpanel, Salesforce, and related services.SnowflakeZenBusiness, Inc., based in the United States, reports a ransomware claim attributed to the threat actor shinyhunters, with several terabytes exfiltrated from Snowflake, Mixpanel, Salesforce, and related services.