Resecurity Went on the Cyber Offensive – When ‘Shiny Objects’ trick ‘Shiny Hunters’

Resecurity released 105 pages containing over 1,000 messages tied to hacker John Erin Binns, detailing contacts with an unnamed woman in Turkey and an associate called “S.M.” The communications reference the so‑called “Scattered LAPSUS$ Hunters” and the broader “The Com” collective, with Resecurity noting that the group had posted phone numbers and addresses of hundreds of government officials, including nearly 700 from DHS, in October last year.

The Snowflake data breach linked to Binns’s associates affected numerous high‑profile companies and is described as one of the decade’s most significant data security incidents, with at least 160 organisations reportedly targeted through vulnerabilities in Snowflake configurations and access; victim organisations listed include AT&T, Ticketmaster/Live Nation, Santander Bank, LendingTree, Advance Auto Parts, Neiman Marcus and Bausch Health.

Stolen data was allegedly used for extortion by the “ShinyHunters” group, which later rebranded and continued operating under a new name. According to Resecurity, Wagenius and Binns also attempted to leverage foreign infrastructure to evade prosecution, and a female individual linked to Moucka is said to be in Turkey and involved in malicious activity.

The article notes that Connor Moucka is scheduled for trial on 19 October 2026, while John Binns is not currently in U.S. custody, per the Department of Justice. according to Resecurity.