shinyhunters

Tech·6/10/2026AI summary

ShinyHunters Claims Hack of Oracle PeopleSoft Servers at Over 100 Organizations

Cybercrime group ShinyHunters claims to have hacked Oracle PeopleSoft servers at over 100 organizations, including many universities. Data exfiltrated includes student, financial, and administrative information. The group's initial goal was to target an FBI server.

TechCrunch

Instructure Reaches Agreement with Hackers to Secure Stolen Canvas Data

Tech·5/12/2026AI summary

Instructure Reaches Agreement with Hackers to Secure Stolen Canvas Data

Instructure has reached an agreement with the ShinyHunters hacking group to prevent the leak of 3.5 terabytes of stolen student data. While the company did not explicitly confirm a ransom payment, it claims the data has been returned and destroyed.

5/7/2026

Canvas is down as ShinyHunters threatens to leak school’s data

The Instructure-owned learning management platform, Canvas, is down after recently confirming a massive data breach that impacted student names, email addresses, ID numbers, and messages. Students attempting to access the system on Thursday saw a message from the hacking group ShinyHunters, which claimed responsibility for the attack: ShinyHunters has breached Instructure (again). Instead of contacting […]

5/7/2026

Canvas is down as ShinyHunters threatens to leak schools’ data

5/8/2026

Canvas is online again after ShinyHunters threaten to leak schools’ data

The Instructure-owned learning management platform, Canvas, is now online again after it went down following a massive data breach that impacted student names, email addresses, ID numbers, and messages. Before systems were restored, students who attempted to access the system on Thursday saw a message from the hacking group ShinyHunters, which claimed responsibility for the […]

5/7/2026

Hackers deface school login pages after claiming another Instructure hack

The cybercrime group ShinyHunters claimed to have hacked Instructure again, and defaced the login pages of several Instructure customer schools with an extortion message.

TechCrunch

5/5/2026

Vimeo-Datenleck: 119.000 E-Mail-Adressen betroffen

Die Cybergang ShinyHunters hat Daten von Vimeo bei Anodot gestohlen und ins Darknet gestellt. Nun hat Have-I-Been-Pwned sie aufgenommen.

Heise Online

ShinyHunters veröffentlicht gestohlene Vimeo-Daten nach gescheiterter Erpressung

4/30/2026AI summary

ShinyHunters veröffentlicht gestohlene Vimeo-Daten nach gescheiterter Erpressung

Die Hackergruppe ShinyHunters hat nach einem Einbruch beim Dienstleister Anodot gestohlene Vimeo-Daten im Darknet veröffentlicht, nachdem das Unternehmen auf Erpressungsversuche nicht einging.

Heise Online

ShinyHunters: Datenleck bei Zara durch Anodot-Lücke – über 140 GByte gestohlen

Crime·4/22/2026AI summary

ShinyHunters: Datenleck bei Zara durch Anodot-Lücke – über 140 GByte gestohlen

Die Cybergang ShinyHunters hat über den Dienstleister Anodot Daten der Modekette Zara abgegriffen und nach gescheiterter Lösegeldverhandlung über 140 GByte kompromittierter Kundendaten veröffentlicht. Der Inditex-Konzern bestätigt unbefugte Zugriffe auf bei Drittanbietern gehostete Datenbanken mit Handelsdaten, betont jedoch, dass keine sensiblen Daten wie Namen, Adressen oder Zahlungsinformationen betroffen seien. Der Vorfall geht auf einen IT-Sicherheitsvorfall bei einem ehemaligen Technologie-Anbieter zurück.

Heise Online

Security Advisory: Third-Party AI Tool Google Workspace OAuth App Compromise

Urgent

Tech·4/19/2026AI summary

Security Advisory: Third-Party AI Tool Google Workspace OAuth App Compromise

Security researchers have identified a compromise involving a third-party AI tool's Google Workspace OAuth app, potentially affecting hundreds of users across multiple organizations. IOCs have been published to help the community investigate potential malicious activity. Google Workspace Administrators and account owners are advised to check for usage of this app immediately.

Rockstar Games, ShinyHunters Hacker Grubunun Saldırısını Doğruladı