ACCORDING to Crunchbase, a data breach was confirmed after the cybercrime group ShinyHunters claimed to have stolen over 2 million personal records. The group leaked a 402 MB compressed archive on their website following a failed extortion attempt, while Crunchbase said that operations were not affected and the breach is now contained.
Crunchbase notified federal authorities and is investigating the incident with the help of external experts, with the company reviewing the exposed data to determine if any legal notifications are required. The ShinyHunters group, which resumed its Tor data leak site listing breaches at Crunchbase, SoundCloud and Betterment, is described as a financially motivated actor that steals large volumes of personal and corporate data to sell or leak if ransom demands aren’t met.
The article notes that ShinyHunters uses compromised credentials, cloud services and social engineering, and has claimed responsibility for breaches affecting millions of records from platforms including Tokopedia and other high-profile targets. Crunchbase, in its incident response, emphasised that no business operations were disrupted and that systems are secure. 26 January 2026.