shinyhunters
Group profile
ShinyHunters is a financially motivated data-theft and extortion group active since 2020, responsible for high-profile breaches including Ticketmaster (via Snowflake) and PowerSchool; by 2025 they launched a RaaS offering called "shinysp1d3r," and in August 2025 French authorities arrested four members.
MITRE ATT&CK TTPs
Initial Access
Defense Evasion
T1550.001Use Alternate Authentication Material: Application Access Token
Use of malicious "Connected" OAuth applications to maintain persistent access to Salesforce and Microsoft 365 environments without needing passwords.
Collection
T1213Data from Information Repositories
Frequent targets include Confluence, Jira, and SharePoint to collect internal documentation and plaintext credentials.
Exfiltration
T1567Exfiltration Over Web Service
Use of legitimate cloud tools and native APIs to "drain" data from CRMs (Salesforce) directly to C2 servers.
Impact
T1486Data Encrypted for Impact
Reconnaissance
T1598.002Phishing for Information: Spearphishing Attachment
Recent victims
showing 50 of 160| Date | Website / victim | Sector | Country |
|---|---|---|---|
| 2026-09-22 | F Fresenius Medical Care | Healthcare | DE |
| 2026-09-22 | P PSA - READ THIS NOW | Not Found | |
| 2026-09-17 | Q Qi**** | Not Found | |
| 2026-09-13 |  Kimberly-Clarkkimberly-clark.com | Manufacturing | US |
| 2026-09-07 | S State of Florida DMV | Government & Defense | US |
| 2026-09-07 |  Medela.comMedela.com | Healthcare | CH |
| 2026-08-29 |  Neogen Corporationneogen.com | Agriculture and Food Production | US |
| 2026-08-28 | M McKesson Corporation | Healthcare | US |
| 2026-08-28 | E Elekta AB | Healthcare | SE |
| 2026-08-28 | J Jack Henry & Associates | Financial Services | US |
| 2026-08-23 |  CyrusOne, LLC.cyrusone.com | Technology | US |
| 2026-08-23 |  ReliaQuest, LLCreliaquest.com | Technology | US |
| 2026-08-22 |  NovoCure Limitednovocure.com | Healthcare | IL |
| 2026-08-22 |  BOK Financialbokfinancial.com | Financial Services | US |
| 2026-08-20 | Cyrus******cyrusone.com | Technology | US |
| 2026-08-18 |  Logitech/ Streamlabslogitech.com | Technology | CH |
| 2026-08-12 |  Metabasemetabase.com | Technology | US |
| 2026-08-13 |  Sharecare, Inc.sharecare.com | Healthcare | US |
| 2026-08-13 |  Carhartt, Inc.carhartt.com | Retail & E-Commerce | US |
| 2026-08-14 |  Cook Medical LLCcookmedical.com | Healthcare | US |
| 2026-08-14 |  Baxter International, Inc.baxter.com | Healthcare | US |
| 2026-08-08 | A Ali** ********** | Technology | |
| 2026-08-01 |  Alcon Inc.alcon.com | Healthcare | CH |
| 2026-08-01 |  Lumenis Ltd.lumenis.com | Technology | IL |
| 2026-08-01 |  Questel SASquestel.com | FR | |
| 2026-07-27 |  BH Security, LLC. (brinkshome.com)brinkshome.com | Professional Services | US |
| 2026-07-27 |  RingCentral, Inc.ringcentral.com | Technology | US |
| 2026-07-27 |  Ernst & Youngey.com | Professional Services | US |
| 2026-07-15 | A Abbott owned Exact Sciences Corporation | Healthcare | US |
| 2026-07-01 |  Fluke Corporationfluke.com | Manufacturing | US |
| 2026-07-01 |  Ingram Content Group, Inc.ingramcontent.com | Professional Services | US |
| 2026-06-24 | A Adapt****** | Not Found | |
| 2026-06-18 |  icsecurity.comicsecurity.com | Technology | US |
| 2026-06-18 |  Amazon owned OneMedical.comOneMedical.com | Healthcare | US |
| 2026-06-18 |  NAIC.orgNAIC.org | Professional Services | US |
| 2026-06-16 |  Ralph Laurenralphlauren.com | Retail & E-Commerce | US |
| 2026-06-15 |  icc.eduicc.edu | Education | US |
| 2026-06-15 |  moody.edumoody.edu | Education | US |
| 2026-06-15 |  glendale.eduglendale.edu | Education | US |
| 2026-06-15 |  hccs.eduhccs.edu | Education | US |
| 2026-06-15 |  kodak.comkodak.com | Manufacturing | US |
| 2026-06-15 | D Deep Well Services | Energy & Utilities | |
| 2026-06-15 | S Sysco Corporation | Agriculture and Food Production | US |
| 2026-06-13 |  coe.intcoe.int | Government & Defense | FR |
| 2026-06-12 | M Madison Square Garden Sports Corp. | Retail & E-Commerce | US |
| 2026-06-12 | J JCPenney & several other subsdiaries under Catalyst Brands & Authentic Brands Group | Retail & E-Commerce | US |
| 2026-06-12 | A American Tower Corporation | Technology | US |
| 2026-06-12 | Z Zayo.com & Allstream.com | Technology | US |
| 2026-06-11 |  Nexstar.tvNexstar.tv | Technology | US |
| 2026-06-11 | Ralph Lauren Corporationralphlauren.com | Retail & E-Commerce | US |