Threat actor · coverage timeline
ShinyHunters
153 articles from 16 outlets between 1 Apr and 19 Oct. First reported by SOCRadar. The busiest day was Fri 12 Jun, with 7 articles.
- Articles
- 153
- all time · from 16 outlets
- Days with coverage
- 82
- across 202 days
- Busiest day
- 7
- articles on Fri 12 Jun
- Last 7 days
- 0.1a day
- vs 0.8 a day before
- First report
- 1 Apr
- SOCRadar
- CVEs named
- 9
- 8 in CISA KEV · in these articles
Coverage over time
153 articles · 1 Apr – 19 Oct
- First report1 Apr · SOCRadar
Show as table
| Day (UTC) | Articles | Outlets |
|---|---|---|
| Wed 1 Apr | 1 | SOCRadar 1 |
| Fri 3 Apr | 1 | SANS ISC 1 |
| Tue 7 Apr | 2 | SecurityWeek 1, Malwarebytes 1 |
| Wed 8 Apr | 1 | SANS ISC 1 |
| Fri 10 Apr | 1 | Dark Reading 1 |
| Tue 14 Apr | 1 | Security Affairs 1 |
| Mon 20 Apr | 2 | The Hacker News 1, SecurityWeek 1 |
| Tue 21 Apr | 1 | SOCRadar 1 |
| Mon 27 Apr | 1 | Security Affairs 1 |
| Tue 28 Apr | 3 | SecurityWeek 2, Infosecurity 1 |
| Wed 29 Apr | 1 | Security Affairs 1 |
| Mon 4 May | 2 | DataBreaches 1, SecurityWeek 1 |
| Tue 5 May | 2 | Security Affairs 2 |
| Wed 6 May | 3 | DataBreaches 1, Malwarebytes 1, Dark Reading 1 |
| Thu 7 May | 1 | DataBreaches 1 |
| Fri 8 May | 6 | SecurityWeek 1, Malwarebytes 1, DataBreaches 1, Security Affairs 1, Ars Technica 1, Dark Reading 1 |
| Mon 11 May | 5 | Infosecurity 2, Malwarebytes 1, SecurityWeek 1, The Hacker News 1 |
| Tue 12 May | 4 | The Hacker News 1, Malwarebytes 1, SecurityWeek 1, DataBreaches 1 |
| Wed 13 May | 3 | Security Affairs 1, SecurityWeek 1, Infosecurity 1 |
| Sat 16 May | 1 | DataBreaches 1 |
| Mon 18 May | 2 | SecurityWeek 1, Security Affairs 1 |
| Tue 26 May | 1 | SecurityWeek 1 |
| Thu 28 May | 2 | Malwarebytes 1, SecurityWeek 1 |
| Fri 29 May | 1 | SecurityWeek 1 |
| Sat 30 May | 1 | Security Affairs 1 |
| Sun 31 May | 1 | Security Affairs 1 |
| Fri 5 Jun | 1 | SecurityWeek 1 |
| Sun 7 Jun | 1 | Security Affairs 1 |
| Thu 11 Jun | 4 | SecurityWeek 2, Google Cloud 1, The Hacker News 1 |
| Fri 12 Jun | 7 | SecurityOnline 1, SecurityWeek 1, Security Affairs 1, Rapid7 1, DataBreaches 1, Ars Technica 1, Dark Reading 1 |
| Sat 13 Jun | 1 | Security Affairs 1 |
| Sun 14 Jun | 1 | DataBreaches 1 |
| Mon 15 Jun | 1 | SecurityWeek 1 |
| Wed 17 Jun | 3 | SecurityWeek 1, Security Affairs 1, DataBreaches 1 |
| Thu 18 Jun | 2 | SecurityWeek 1, Malwarebytes 1 |
| Fri 19 Jun | 1 | DataBreaches 1 |
| Mon 22 Jun | 1 | SecurityWeek 1 |
| Thu 25 Jun | 1 | DataBreaches 1 |
| Sat 27 Jun | 1 | DataBreaches 1 |
| Mon 29 Jun | 1 | SecurityWeek 1 |
| Tue 30 Jun | 2 | SecurityWeek 1, Infosecurity 1 |
| Fri 3 Jul | 1 | SecurityWeek 1 |
| Sun 5 Jul | 1 | Security Affairs 1 |
| Mon 13 Jul | 2 | Security Affairs 1, Microsoft 1 |
| Tue 14 Jul | 2 | The Hacker News 1, DataBreaches 1 |
| Sun 19 Jul | 1 | DataBreaches 1 |
| Mon 20 Jul | 1 | Malwarebytes 1 |
| Mon 27 Jul | 3 | SecurityWeek 1, Security Affairs 1, Malwarebytes 1 |
| Wed 29 Jul | 2 | SecurityWeek 1, Security Affairs 1 |
| Sun 2 Aug | 1 | DataBreaches 1 |
| Mon 3 Aug | 1 | SecurityWeek 1 |
| Fri 14 Aug | 2 | SecurityWeek 2 |
| Sun 23 Aug | 1 | DataBreaches 1 |
| Mon 24 Aug | 2 | DataBreaches 1, SecurityWeek 1 |
| Tue 25 Aug | 1 | Infosecurity 1 |
| Sat 29 Aug | 1 | DataBreaches 1 |
| Mon 31 Aug | 2 | SecurityWeek 1, Malwarebytes 1 |
| Tue 1 Sep | 1 | Infosecurity 1 |
| Thu 3 Sep | 1 | Dark Reading 1 |
| Thu 10 Sep | 1 | DataBreaches 1 |
| Sat 19 Sep | 1 | DataBreaches 1 |
| Mon 21 Sep | 4 | Malwarebytes 1, Infosecurity 1, SOCRadar 1, Dark Reading 1 |
| Tue 22 Sep | 1 | DataBreaches 1 |
| Wed 23 Sep | 6 | The Hacker News 1, SecurityWeek 1, Infosecurity 1, Malwarebytes 1, Security Affairs 1, Ars Technica 1 |
| Thu 24 Sep | 1 | SecurityOnline 1 |
| Fri 25 Sep | 1 | SecurityWeek 1 |
| Sat 26 Sep | 1 | Google Cloud 1 |
| Mon 28 Sep | 6 | Malwarebytes 2, SecurityWeek 1, Check Point 1, Krebs on Security 1, DataBreaches 1 |
| Tue 29 Sep | 5 | DataBreaches 2, Security Affairs 1, The Hacker News 1, SecurityWeek 1 |
| Wed 30 Sep | 1 | SecurityWeek 1 |
| Sat 3 Oct | 1 | DataBreaches 1 |
| Sun 4 Oct | 2 | The Hacker News 1, Security Affairs 1 |
| Mon 5 Oct | 2 | SecurityWeek 1, SecurityOnline 1 |
| Tue 6 Oct | 3 | The Hacker News 1, Security Affairs 1, SecurityWeek 1 |
| Wed 7 Oct | 2 | Malwarebytes 1, Krebs on Security 1 |
| Fri 9 Oct | 2 | Dark Reading 1, The Hacker News 1 |
| Sat 10 Oct | 2 | Krebs on Security 1, DataBreaches 1 |
| Mon 12 Oct | 3 | Infosecurity 1, SecurityWeek 1, Security Affairs 1 |
| Tue 13 Oct | 1 | DataBreaches 1 |
| Thu 15 Oct | 1 | DataBreaches 1 |
| Fri 16 Oct | 1 | Dark Reading 1 |
| Mon 19 Oct | 1 | Krebs on Security 1 |
Articles
153 articles1 article
- US Investigators Probe Ransom Negotiators’ Ties to ShinyHuntersKrebs on Security
1 article
1 article
1 article
3 articles
2 articles
- FBI arrests ransomware negotiator in ShinyHunters extortion probeKrebs on Security
2 articles
2 articles
3 articles
- FBI Drops Accenture Contractor After Breach Exposed Staff DataSecurity Affairs
2 articles
2 articles
1 article
1 article
5 articles
- Dutch Police Arrest Alleged ShinyHunters Member in Odido ProbeSecurity Affairs
6 articles
1 article
1 article
1 article
6 articles
- ShinyHunters Claims FBI Applicant Data Breach via Oracle FlawSecurity Affairs
1 article
4 articles
1 article
1 article
1 article
1 article
2 articles
1 article
1 article
2 articles
1 article
2 articles
1 article
1 article
2 articles
- ShinyHunters threatens to leak EY tax data by July 31Security Affairs
- ShinyHunters Claims Ernst & Young HackSecurityWeek
3 articles
- DentaQuest breach exposes 23 million after ShinyHunters leakSecurity Affairs
1 article
1 article
2 articles
- Microsoft probes Salesforce data theft by ShinyHunters gangThe Hacker News
2 articles
- Dutch police seek local hackers in Odido breach affecting 6MSecurity Affairs
1 article
- Medtronic Breach Hits 3.8M, Tied to ShinyHunters HackersSecurity Affairs
1 article
2 articles
1 article
1 article
1 article
1 article
1 article
2 articles
3 articles
- EdTech firms hit by ShinyHunters and FulcrumSec cyberattacksSecurity Affairs
1 article
1 article
1 article
- CISA warns of Oracle PeopleSoft zero day exploit CVE-2026-35273Security Affairs
7 articles
- CVE-2026-35273 flaw used in ShinyHunters attack on universitiesSecurity Affairs
4 articles
1 article
- DentaQuest breach exposes 2.6M patient data after ShinyHuntersSecurity Affairs
1 article
1 article
- ShinyHunters Leak 5 Million Charter Communications RecordsSecurity Affairs
1 article
- ShinyHunters leaks 4.9M Charter records after ransom ignoredSecurity Affairs
1 article
2 articles
1 article
2 articles
1 article
3 articles
- Instructure settles Canvas breach, ShinyHunters return dataSecurity Affairs
4 articles
5 articles
- Ivanti EPMM and PAN OS flaws hit as patches roll out mid MayThe Hacker News
6 articles
1 article
3 articles
2 articles
- Vimeo confirms data breach via Anodot, exposing 119k usersSecurity Affairs
- Instructure investigating Canvas breach after ShinyHunters claimSecurity Affairs
2 articles
1 article
- ShinyHunters exploit Anodot incident to target VimeoSecurity Affairs
3 articles
1 article
- Medtronic breach confirmed after ShinyHunters claims 9M recordsSecurity Affairs
1 article
2 articles
- Vercel breach traced to compromised third party AI toolThe Hacker News
1 article
- ShinyHunters leak Rockstar data via third party cloud breachSecurity Affairs
1 article
1 article
2 articles
1 article
1 article
- Trivy-Linked Cisco Breach & ShinyHunters’ Stolen Data ClaimSOCRadar · first report
No articles in this range.