ShinyHunters hit 850k alumni, donors, students, and fam in last year's Harvard University raid
ShinyHunters hit 850k alumni, donors, students, and fam in last year's Harvard University raid
How about them apples? Plenty of personal + donation data leaked by crims, data-sifting breach site claims a year after attack
www.theregister.com
November 3, 2026 at 3:39 PM
ShinyHunters hit 850k alumni, donors, students, and fam in last year's Harvard University raid
New breach: Harvard University was targeted by ShinyHunters last year in a breach that exposed 851k unique email addresses. Data included personal info related to the university's alumni and fundraising systems. 64% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/Harvard
Have I Been Pwned: Harvard Data Breach
In November 2025, Harvard University suffered a data breach later linked to a ShinyHunters "pay or leak" extortion attempt. The data contained 851k unique email addresses relating to the university's ...
haveibeenpwned.com
November 3, 2026 at 7:34 AM
New breach: Harvard University was targeted by ShinyHunters last year in a breach that exposed 851k unique email addresses. Data included personal info related to the university's alumni and fundraising systems. 64% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/Harvard
Zero of what we’ve encountered is panic caused by cyber vendors, that take is significantly out of touch. When someone like oracle moving to monthly patching with repeated 9.8s in weblogic and Shinyhunters popping peoplesoft you have to act. We’re protecting crit infra and hospitals, etc.
November 2, 2026 at 1:22 AM
Zero of what we’ve encountered is panic caused by cyber vendors, that take is significantly out of touch. When someone like oracle moving to monthly patching with repeated 9.8s in weblogic and Shinyhunters popping peoplesoft you have to act. We’re protecting crit infra and hospitals, etc.
ShinyHunters hackers say they breached FBI, stole data on bureau employees https://redoracle.com/News/shinyhunters-hackers-say-they-breached-fbi-stole-data-on-bureau.html #shinyhunters #hackers #breached
November 3, 2026 at 5:46 AM
ShinyHunters hackers say they breached FBI, stole data on bureau employees https://redoracle.com/News/shinyhunters-hackers-say-they-breached-fbi-stole-data-on-bureau.html #shinyhunters #hackers #breached
There's significant issues with cyber vendors sparking panic downstream regarding GenAI, FWIW, in my experience.
Yes there are more vulns and more patching, and yes ShinyHunters are still dicks.
Yes there are more vulns and more patching, and yes ShinyHunters are still dicks.
November 2, 2026 at 1:48 PM
There's significant issues with cyber vendors sparking panic downstream regarding GenAI, FWIW, in my experience.
Yes there are more vulns and more patching, and yes ShinyHunters are still dicks.
Yes there are more vulns and more patching, and yes ShinyHunters are still dicks.
ShinyHunters used three playbooks from January through May 2026: SSO voice phishing, Salesforce Experience Cloud misconfigurations, and OAuth supply chain attacks. The FBI says don't pay their ransoms. At least one victim, Instructure, paid anyway.
ShinyHunters 2026 Breach Tracker (January–May 2026)
Confirmed ShinyHunters breaches Jan-May 2026: victims, methods, what to do. Tracker verified through 2026-09-28.
stateofsurveillance.org
November 1, 2026 at 3:08 PM
ShinyHunters used three playbooks from January through May 2026: SSO voice phishing, Salesforce Experience Cloud misconfigurations, and OAuth supply chain attacks. The FBI says don't pay their ransoms. At least one victim, Instructure, paid anyway.
Invasão do FBI pelo ShinyHunters começou num sistema PeopleSoft sem atualização, e terceirizado foi afastado
#perícia #ciênciaforense #engenhariaforense #períciadigital
https://nexocausal.eng.br/artigos/fbi-invadido-shinyhunters-peoplesoft-terceirizada-presos/
#perícia #ciênciaforense #engenhariaforense #períciadigital
https://nexocausal.eng.br/artigos/fbi-invadido-shinyhunters-peoplesoft-terceirizada-presos/
Invasão do FBI pelo ShinyHunters começou num sistema PeopleSoft sem atualização, e terceirizado foi afastado
O FBI atribuiu a invasão do seu portal de vagas a uma plataforma administrada por terceiros em que um contratado não aplicou uma atualização de segurança publicada para protegê-la.
nexocausal.eng.br
November 2, 2026 at 5:24 PM
Invasão do FBI pelo ShinyHunters começou num sistema PeopleSoft sem atualização, e terceirizado foi afastado
#perícia #ciênciaforense #engenhariaforense #períciadigital
https://nexocausal.eng.br/artigos/fbi-invadido-shinyhunters-peoplesoft-terceirizada-presos/
#perícia #ciênciaforense #engenhariaforense #períciadigital
https://nexocausal.eng.br/artigos/fbi-invadido-shinyhunters-peoplesoft-terceirizada-presos/
📰 The FBI says Dutch authorities arrested an alleged leader of the ShinyHunters cybercrime group as the bureau continues investigating a compromise of its recruitment portal and possible exposure of employee information....
📡 Read full story here 👇
📡 Read full story here 👇
FBI says ShinyHunters leader arrested after jobs portal breach
The FBI says Dutch authorities arrested an alleged leader of the ShinyHunters cybercrime group as the bureau continues investigating a compromise of its recruitment portal and possible exposure of employee information.
ctcnews.ca
November 1, 2026 at 12:03 AM
📰 The FBI says Dutch authorities arrested an alleged leader of the ShinyHunters cybercrime group as the bureau continues investigating a compromise of its recruitment portal and possible exposure of employee information....
📡 Read full story here 👇
📡 Read full story here 👇
ShinyHunters hit 850k alumni, donors, students, and fam in last year's Harvard University raid
#mediaor
#mediaor
ShinyHunters hit 850k alumni, donors, students, and fam in last year's Harvard University raid
How about them apples? Plenty of personal + donation data leaked by crims, data-sifting breach site claims a year after attack
www.theregister.com
November 3, 2026 at 3:48 PM
ShinyHunters hit 850k alumni, donors, students, and fam in last year's Harvard University raid
#mediaor
#mediaor
ShinyHunters hit 850k alumni, donors, students, and fam in last year's Harvard University raid
www.theregister.com/cyber-crime/...
#Cybersecurity #Tietomurto
www.theregister.com/cyber-crime/...
#Cybersecurity #Tietomurto
ShinyHunters hit 850k alumni, donors, students, and fam in last year's Harvard University raid
How about them apples? Plenty of personal + donation data leaked by crims, data-sifting breach site claims a year after attack
www.theregister.com
November 3, 2026 at 5:36 PM
ShinyHunters hit 850k alumni, donors, students, and fam in last year's Harvard University raid
www.theregister.com/cyber-crime/...
#Cybersecurity #Tietomurto
www.theregister.com/cyber-crime/...
#Cybersecurity #Tietomurto
#$DXCM: ShinyHunters listed Dexcom with O'Reilly Automotive, threatening to publish files, with no samples posted. Dexcom has not confirmed a breach, no claim: openclassactions.com/lawsuits/dat...
Dexcom Data Breach Lawsuits Grow to Eight Over Hacker Claim
Eight class actions have followed ShinyHunters’ claim that it took Dexcom data. Dexcom has not confirmed a breach and there is nothing to claim.
openclassactions.com
November 2, 2026 at 9:07 PM
#$DXCM: ShinyHunters listed Dexcom with O'Reilly Automotive, threatening to publish files, with no samples posted. Dexcom has not confirmed a breach, no claim: openclassactions.com/lawsuits/dat...
the actor is shinyhunters, who i have written about extensively. they are essentially an ecrime group whose model is data theft followed by extortion.
November 1, 2026 at 11:35 AM
the actor is shinyhunters, who i have written about extensively. they are essentially an ecrime group whose model is data theft followed by extortion.
ShinyHunters abused a three-part SSRF-to-RCE chain in Oracle PeopleSoft. CVE-2026-35273 needs your urgent patching. #ZeroDay #Oracle #PeopleSoft #ShinyHunters #RCE #Cybersecurity https://thedailytechfeed.com/shinyhunters-chain-flaw-in-oracle-peoplesoft-zero-day-for-rce-exploit/
October 28, 2026 at 7:55 AM
ShinyHunters abused a three-part SSRF-to-RCE chain in Oracle PeopleSoft. CVE-2026-35273 needs your urgent patching. #ZeroDay #Oracle #PeopleSoft #ShinyHunters #RCE #Cybersecurity https://thedailytechfeed.com/shinyhunters-chain-flaw-in-oracle-peoplesoft-zero-day-for-rce-exploit/
🔒 ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws
The critical Oracle PeopleSoft bug that ShinyHunters has exploited since May is not one flaw...
https://tinyurl.com/27y2b33w #CyberSecurity #InfoSec #CrustyTLDR
The critical Oracle PeopleSoft bug that ShinyHunters has exploited since May is not one flaw...
https://tinyurl.com/27y2b33w #CyberSecurity #InfoSec #CrustyTLDR
October 29, 2026 at 2:01 AM
🔒 ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws
The critical Oracle PeopleSoft bug that ShinyHunters has exploited since May is not one flaw...
https://tinyurl.com/27y2b33w #CyberSecurity #InfoSec #CrustyTLDR
The critical Oracle PeopleSoft bug that ShinyHunters has exploited since May is not one flaw...
https://tinyurl.com/27y2b33w #CyberSecurity #InfoSec #CrustyTLDR
wired is different now, rly impressed by the bravery of publishing, and how well written and organized it is. Go shinyhunters!
October 28, 2026 at 10:51 PM
wired is different now, rly impressed by the bravery of publishing, and how well written and organized it is. Go shinyhunters!
the line between 'ransomware negotiator' and 'accomplice' was always blurry tbh.
FBI Arrests Executive at Ransomware Negotiation Firm
Agents with the Federal Bureau of Investigation (FBI) on Thursday arrested the co-founder of a Canadian cybersecurity firm in connection with an investigation into the ShinyHunters hacking group that recently relieved the FBI of sensitive data on thousands of agents, multiple sources tell KrebsOnSec
krebsonsecurity.com
November 2, 2026 at 11:31 AM
the line between 'ransomware negotiator' and 'accomplice' was always blurry tbh.
lol are we surprised?
the entire "ransomware negotiation" industry is shady af.
you're paying a guy to talk to another guy... sometimes it's the same guy.
the entire "ransomware negotiation" industry is shady af.
you're paying a guy to talk to another guy... sometimes it's the same guy.
Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who maintained unusually close relations with the extortion group, KrebsOnSecurity has learned. Sources c
krebsonsecurity.com
November 2, 2026 at 8:31 AM
lol are we surprised?
the entire "ransomware negotiation" industry is shady af.
you're paying a guy to talk to another guy... sometimes it's the same guy.
the entire "ransomware negotiation" industry is shady af.
you're paying a guy to talk to another guy... sometimes it's the same guy.
Oracle's patch parade continues 🤦♀️
Attackers are still probing a critical E-Business Suite vulnerability despite a patch, while the PeopleSoft zero-day exploited by ShinyHunters is actually three distinct bugs.
Attackers are still probing a critical E-Business Suite vulnerability despite a patch, while the PeopleSoft zero-day exploited by ShinyHunters is actually three distinct bugs.
October 29, 2026 at 5:49 PM
Oracle's patch parade continues 🤦♀️
Attackers are still probing a critical E-Business Suite vulnerability despite a patch, while the PeopleSoft zero-day exploited by ShinyHunters is actually three distinct bugs.
Attackers are still probing a critical E-Business Suite vulnerability despite a patch, while the PeopleSoft zero-day exploited by ShinyHunters is actually three distinct bugs.
Harvard University Data Breach: ShinyHunters Exposed 851,000 Unique Email Addresses + Video
Data Breach Unconfirmed Full Impact November 3, 2026 Introduction Harvard University has been added to the growing list of organizations associated with major data exposure incidents after the cybercriminal…
Data Breach Unconfirmed Full Impact November 3, 2026 Introduction Harvard University has been added to the growing list of organizations associated with major data exposure incidents after the cybercriminal…
Harvard University Data Breach: ShinyHunters Exposed 851,000 Unique Email Addresses + Video
Data Breach Unconfirmed Full Impact November 3, 2026 Introduction Harvard University has been added to the growing list of organizations associated with major data exposure incidents after the cybercriminal group ShinyHunters targeted the university last year. According to Have I Been Pwned (HIBP), the incident exposed approximately 851,000 unique email addresses, alongside personal information connected to Harvard's alumni and fundraising systems.
undercodenews.com
November 3, 2026 at 8:24 AM
Harvard University Data Breach: ShinyHunters Exposed 851,000 Unique Email Addresses + Video
Data Breach Unconfirmed Full Impact November 3, 2026 Introduction Harvard University has been added to the growing list of organizations associated with major data exposure incidents after the cybercriminal…
Data Breach Unconfirmed Full Impact November 3, 2026 Introduction Harvard University has been added to the growing list of organizations associated with major data exposure incidents after the cybercriminal…
2/10 The FBI blames a contractor's missed patch for the ShinyHunters breach of employee data. Third-party patching belongs in the contract.
https://secblog.reedcloudsec.com/secblog-weekly-issue-006/#:~:text=FBI%20Blames%20Contractor%27s%20Missed
https://secblog.reedcloudsec.com/secblog-weekly-issue-006/#:~:text=FBI%20Blames%20Contractor%27s%20Missed
November 3, 2026 at 5:00 PM
2/10 The FBI blames a contractor's missed patch for the ShinyHunters breach of employee data. Third-party patching belongs in the contract.
https://secblog.reedcloudsec.com/secblog-weekly-issue-006/#:~:text=FBI%20Blames%20Contractor%27s%20Missed
https://secblog.reedcloudsec.com/secblog-weekly-issue-006/#:~:text=FBI%20Blames%20Contractor%27s%20Missed
Have I Been Pwned analyzed data from Harvard’s breach and found information linked to 850,500 accounts. ShinyHunters claimed responsibility and said it stole records; Harvard said the affected systems did not store Social Security numbers, passwords, or payment card or.
Harvard Breach Exposed Data Linked to 850,500 Accounts, Have I Been Pwned Says
Have I Been Pwned analyzed data from Harvard’s breach and found information linked to 850,500 accounts. ShinyHunters claimed responsibility and said it stole…
cyber.hendryadrian.com
November 3, 2026 at 4:00 PM
Have I Been Pwned analyzed data from Harvard’s breach and found information linked to 850,500 accounts. ShinyHunters claimed responsibility and said it stole records; Harvard said the affected systems did not store Social Security numbers, passwords, or payment card or.
Oracle celebrates end of Cybersecurity Awareness Month with quadruple trouble
Oracle celebrates end of Cybersecurity Awareness Month with quadruple trouble
Attackers probe another EBS bug, and ShinyHunters' PeopleSoft 0-day turns out to involve three vulns
www.theregister.com
October 28, 2026 at 8:01 PM
Oracle celebrates end of Cybersecurity Awareness Month with quadruple trouble
The FBI arrested a third ShinyHunters member as the group uses AI agents to modify its tools in real time and evade detection.
YouTube: www.youtube.com/shorts/M8-YQ...
#Cybersecurity #ShinyHunters #AI
YouTube: www.youtube.com/shorts/M8-YQ...
#Cybersecurity #ShinyHunters #AI
Don't Get Pwned: ShinyHunters Now Use AI to Evade Detection
The FBI arrested a third ShinyHunters member as the group uses AI agents to modify its tools in real time and evade detection.
www.youtube.com
October 28, 2026 at 1:00 AM
The FBI arrested a third ShinyHunters member as the group uses AI agents to modify its tools in real time and evade detection.
YouTube: www.youtube.com/shorts/M8-YQ...
#Cybersecurity #ShinyHunters #AI
YouTube: www.youtube.com/shorts/M8-YQ...
#Cybersecurity #ShinyHunters #AI
the oracle peoplesoft flaw shinyhunters exploited as a zero-day, cve-2026-35273, is not a single bug. zero day initiative has shown it is three distinct vulnerabilities oracle fixed under one identifier.
November 1, 2026 at 11:35 AM
the oracle peoplesoft flaw shinyhunters exploited as a zero-day, cve-2026-35273, is not a single bug. zero day initiative has shown it is three distinct vulnerabilities oracle fixed under one identifier.