-
Dutch police arrested convicted hacker Pepijn van der Stap in the ShinyHunters probe into the Odido breach, which exposed data belonging to millions of customers.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Authorities in the Netherlands have arrested a 23-year-old convicted cybercriminal on suspicion of aiding in data thefts and extortions by the prolific hacker group ShinyHunters. In the days immediately following the suspect’s arrest, remaining ShinyHunters members dramatically escalated their attacks, stealing highly sensitive data from the FBI and extorting the Russian ransomware group Cl0p.
·
404 Media, A Little Sunshine, Bloomberg, Cl0p, FBI, Google Threat Intelligence Group, KELA, Latest Warnings, Mandiant, Ne’er-Do-Well News, Neo Security, NL Times, Odido, Oracle, PeopleSoft, Pepijn van der Stap, Ransomware, Reuters, ScatteredLapsussHunters, ShinyHunters, SLSH, TeamPCP, Umbreon, Wired¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
ShinyHunters exploit CVE-2026-35273 in Oracle PeopleSoft using URL encoding to bypass WAF rules, deploy web shells and spread the SIDEEYE backdoor.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
ShinyHunters hacks the FBI Jobs portal and claims sensitive data on nearly all FBI agents and job applicants before the site is taken offline for security work.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Clop responds to ShinyHunters after its leak site takeover as the group demands an eight-figure payment, interest and a public apology in their escalating feud.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
ShinyHunters hacked and defaced Clop’s ransomware leak site, replacing its content with ShinyHunters branding as its own onion site goes offline.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
EY confirmed the theft of client tax documents from its third-party support platform. ShinyHunters claims responsibility and is threatening to publish the data.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Google says ShinyHunters exploited Oracle PeopleSoft zero-day to steal data from 100+ organisations, with universities making up most victims.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
ShinyHunters hackers leak 40GB of University of Nottingham personal and financial data, allegedly impacting 450,000 students and staff records.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Instructure has reached an agreement with the ShinyHunters group to return and destroy stolen Canvas data, protecting millions of student records from a public leak.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
