shinyhunters

ShinyHunters is a ransomware and data-extortion group that steals data and threatens to publish it unless a ransom is paid, with notable tradecraft including exploiting a zero-day in Oracle PeopleSoft (CVE-2026-35273) to breach networks and using social engineering for initial access. Victims span Technology, Consumer Services, Financial Services, Healthcare, and Education sectors, with the United States, France, Germany, Japan, and Australia among the most affected countries, and a total of 148 victims claimed across 17 stories. As illustration of the pattern, the Canvas LMS breach exposed over 30 million students across 9,000 institutions and has been attributed to ShinyHunters.

Sectors: Technology, Consumer Services, Financial Services · Countries: US, FR, DE