In November 2025, AI music generation tool Suno suffered a data breach that later came to light in July the following year. The data contained over 55M unique email addresses. Phone numbers were also present where they had been...
In March 2026, hackers claimed they had obtained data from the gig economy platform Paidwork which they then listed for sale. Almost 11GB of data allegedly obtained from the platform was subsequently posted publicly in July and...
In July 2026, electronic test and measurement equipment company Fluke was targeted in a ShinyHunters “pay or leak” extortion campaign. The group subsequently published more than 100GB of data allegedly taken from the...
In June 2026, a party claiming to have access to data from Goose Creek Candle Company sent emails to a number of the company’s customers, claiming the company had a security vulnerability and suffered a data breach. The...
In June 2026, Glendale Community College was the target of a ShinyHunters “pay or leak” extortion campaign. Data allegedly obtained from Glendale was later published online and included almost 800k unique email...
In June 2026, Moody Bible Institute was targeted by a ShinyHunters “pay or leak” extortion campaign. Over 2.3M unique email addresses and other personal data were later published publicly, including names, physical...
In June 2026, the food distribution company Sysco was targeted by a ShinyHunters “pay or leak” extortion campaign. Data was subsequently published containing 2.7M unique email addresses belonging to staff and...
In June 2026, telecommunications tower infrastructure company American Tower was the target of a ShinyHunters “pay or leak” extortion campaign. The group subsequently published data allegedly taken from the company...
In June 2026, the sports and entertainment company Madison Square Garden Sports was the target of a ShinyHunters “pay or leak” extortion campaign. The group later published the alleged data, which included almost 10M...
In June 2026, retailer JCPenney and associated brands were targeted in a ShinyHunters “pay or leak” extortion campaign. Data allegedly obtained from JCPenney through the exploitation of a critical zero-day...
In June 2026, fashion retailer Ralph Lauren was targeted in a ShinyHunters “pay or leak” extortion campaign. The group subsequently published hundreds of gigabytes of data they claimed was obtained from the...
On 18 June 2026, the latest phase of Operation Endgame targeted the SocGholish malware operation, a prolific malware distribution network used to compromise systems and facilitate further cybercrime. Coordinated by international...
