ShinyHunters — Ransomware Profile
ShinyHunters is a prolific data breach and extortion group since 2020. Breached Ticketmaster (560M records), AT&T (110M via Snowflake), Santander Bank. In 2024 exploited Snowflake misconfigurations to breach 160+ companies. French national sentenced to 3 years in January 2024.Recent claimed victims
- Abbott owned Exact Sciences Corporation 2026-07-15
- Fluke Corporation 2026-07-01
- Ingram Content Group, Inc. 2026-07-01
- Amazon owned OneMedical.com 2026-06-18
- NAIC.org 2026-06-18
- icsecurity.com 2026-06-18
- Ralph Lauren 2026-06-16
- glendale.edu 2026-06-15
- Deep Well Services 2026-06-15
- icc.edu 2026-06-15
- moody.edu 2026-06-15
- kodak.com 2026-06-15
- hccs.edu 2026-06-15
- Sysco Corporation 2026-06-15
- coe.int 2026-06-14
- Zayo.com & Allstream.com 2026-06-12
- Madison Square Garden Sports Corp. 2026-06-12
- JCPenney & several other subsdiaries under Catalyst Brands & Authentic Brands Group 2026-06-12
- American Tower Corporation 2026-06-12
- Ralph Lauren Corporation 2026-06-11
- Notice 2026-06-11
- Nexstar.tv 2026-06-11
- nottingham.ac.uk 2026-06-09
- DentaQuest, LLC. 2026-05-30
- BCD Travel 2026-05-29
Vendor research
- the original report Google Threat Intelligence
- Threat Actor Profile: ShinyHunters Analyst1
- ShinyHunters: Cloud Data Extortion Group Mandiant