Click any tag below to further narrow down your results
Links
The ShinyHunters gang is extorting PornHub after stealing Premium members' search and watch history data from a breach at analytics provider Mixpanel. While PornHub confirmed the breach affected its users, it asserts that Mixpanel's systems were not compromised during this incident, and sensitive data remains secure.
The cybercriminal group ShinyHunters is targeting around 100 organizations in a campaign aimed at stealing Okta single sign-on credentials. Companies like Atlassian and Canva are included among the targets, with reports of successful breaches at Crunchbase and Betterment. Experts recommend stronger multi-factor authentication measures to combat these threats.
Hackers known as ShinyHunters leaked data from over 5 million Panera Bread customers after failing to extort the company. The breach, which involved compromised single-sign-on credentials, includes email addresses, names, and phone numbers. Experts warn this poses significant risks for further phishing and identity theft attacks.
Grubhub has confirmed a data breach where hackers accessed its systems and are now demanding a Bitcoin ransom. The company is investigating and has partnered with a cybersecurity firm while assuring that sensitive customer information was not compromised. Sources indicate that the ShinyHunters group is behind the extortion.
A series of data breaches affecting companies such as Qantas, Allianz Life, LVMH, and Adidas has been attributed to the ShinyHunters extortion group, which uses voice phishing to compromise Salesforce CRM accounts. The attackers impersonate IT support to manipulate employees into entering connection codes that link malicious applications to Salesforce environments, leading to data theft and potential extortion attempts without public leaks so far. Salesforce has confirmed that their platform is not compromised, emphasizing the importance of customer vigilance against social engineering attacks.
Red Hat is facing extortion from the ShinyHunters gang after a data breach involving nearly 570GB of sensitive information, including Customer Engagement Reports. The threat actors have leaked samples and set a deadline for ransom negotiations, while also collaborating with other hacking groups to enhance their extortion efforts.
The article discusses a significant data breach involving high-profile fashion brands, including Gucci, Balenciaga, and Alexander McQueen, attributed to a hacker group known as ShinyHunters. Sensitive customer information was reportedly compromised, raising concerns about data security in the luxury fashion industry.
Workday has disclosed a data breach following a social engineering attack that compromised a third-party CRM platform, exposing business contact information but not customer tenant data. The incident is believed to be part of a broader wave of attacks linked to the ShinyHunters extortion group, which has targeted multiple high-profile companies through similar tactics.