ShinyHunters

Reported Context (364)

The report identifies ShinyHunters as part of an alliance called The COM and associates the alliance with targeted spear phishing and subsequent malware or ransomware deployment. Hoxhunt reports AI-assistance indicators in phishing rose to 56% in December
The Harvard University breach was subsequently tied to an extortion bid by ShinyHunters. Security Roundup: Flowise Exploitation, AI Credential Theft and SAP Risks
The report links ShinyHunters to the Queensland Department of Education via the Canvas supplier breach and marks the government-relevant activity confirmed. CYFIRMA Maps Edge-Focused Cyber Threats to Australian and New Zealand Government
Claimed responsibility for the Harvard Alumni Affairs and Development systems breach and said it stole over 1 million records; the article reports that an archive was later leaked. Harvard Breach Exposed Data Linked to 850,500 Accounts, Have I Been Pwned Says
The group claimed to have stolen more than 200,000 driver records in a separate September breach at the Florida Department of Highway Safety and Motor Vehicles. That agency confirmed database access but did not name ShinyHunters; the article does not link the group to the FLDOE breach. Florida Student Aid Breach May Expose Data of 4.9 Million

CVE (193)

Malware (239)

People (187)

Threat Actors (353)

MITRE ATT&CK (153)

Vendors (250)

Products (604)

Tools (163)

Industries (167)

Countries (95)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.