ShinyHunters Claims It Still Holds Victim Data and Threatens Publication

· Original article ↗

Summary

ShinyHunters claims its operations remain intact and says data held from organizations negotiating with the group may be published. The monitoring record notes that the claims are unverified.

Key points

  • ShinyHunters said its operations and infrastructure remain intact.
  • The group threatened to publish data it claims to hold from organizations negotiating with it.
  • ShinyHunters urged those organizations to resume serious negotiations, warning that publication could still be prevented.
  • The monitoring record lists the victim as “WARNING” and was published on September 30, 2026.
  • The source says the group's claims could not be independently confirmed.

Article Details

Victim
WARNING
Claim Date
2026-09-30
Encryption Status
Unknown
Exfiltration Status
Unknown
Exfiltrated Data
ShinyHunters claimed that data belonging to organizations negotiating with them remained in their possession and could be published; this is an unverified group claim.
Ransom Demand
The group threatened to publish data and referred to organizations avoiding payment of tens of millions of dollars, but no specific demand or confirmed ransom demand was reported.
Leak Status
The group threatened possible publication; no publication was reported. The claim is unverified, and victim confirmation is absent.

Threat Actors

Related Articles