ShinyHunters Collective — Threat Actor Profile, Campaigns & Targets

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
November 14, 2025
Last Seen
November 14, 2025

ShinyHunters Collective is a apt_group tracked across 2 threat clusters and 1 intelligence report mention on ThreatCluster. First observed November 14, 2025; most recent activity November 14, 2025.

Overview

ShinyHunters Collective is a financially motivated APT group implicated in targeted intrusions and data/theft operations. The latest reporting ties the group to Jaguar Land Rover’s cyberattack, which incurred substantial financial losses in the recent quarter, underscoring the group’s potential impact on automotive manufacturers and supply chains.

Related Threat Clusters

  • Jaguar Land Rover Cyberattack Costs £485m in Q2 2025

    Jaguar Land Rover (JLR) reported a £485 million loss for Q2 2025 following a cyberattack that shut down production for over a month. The attack, which occurred in August, resulted in exceptional costs of £196 million…

    12 articles · Updated November 17, 2025
  • JLR Cyber Attack Causes Significant Drop in UK Car Production

    Jaguar Land Rover (JLR), the UK's largest automotive employer, experienced a cyber attack on August 31, 2025, which halted production. As a result, UK car production fell by 24% in October compared to the previous year,…

    21 articles · Updated November 28, 2025

Recent Intelligence Reports

  • Jaguar Land Rover cyber attack costs firm £485m in the quarter — Computerweekly · November 14, 2025

CVSS v3.1 Breakdown