Ransomware Group intelligence

Shinyhunters

Active

Track Shinyhunters with 97 published victims and 4 known leak locations in a single intelligence view.

Victims 97 Known published victims in this dataset
First discovered 2025-10-03 Earliest victim discovery date
Last discovered 2026-04-24 Latest victim discovery date
Inactive since 0 days Days since the latest known victim
Top country United States 67 victims
Known locations 4 Leak or negotiation infrastructure tracked

Overview

Shinyhunters is tracked by Breach House as a ransomware group with 97 published victims.

United States is currently the most targeted country in this dataset.

4 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (4)

    Label Type Availability Links
    Leak location 1 Onion service Unknown shinypogk4jjniry5qi7247tznop6mxdrdte2k6pdu5cyo43vdzmrwid.onion
    Leak location 2 Web location Unknown breachforums.hn
    Leak location 3 Onion service Unknown toolatedhs5dtr2pv6h5kdraneak5gs3sxrecqhoufc5e45edior7mqd.onion
    Leak location 4 Onion service Unknown shnyhntww34phqoa6dcgnvps2yu7dlwzmy5lkvejwjdo6z7bmgshzayd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (97)

    Search, filter and paginate the victim timeline for Shinyhunters.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Udemy, Inc. (udemy.com) id28423 View details United States Education
    Ransomware ADT, Inc. (adt.com) id28422 View details United States Services
    Ransomware Aman Resorts (aman.com) id28323 View details Singapore Hospitality / Food & Beverage / Tourism
    Ransomware The Canada Life Assurance Company (canadalife.com) id28322 View details Canada Finance / Legal / Insurance
    Ransomware Pitney Bowes Inc. (pb.com) id28321 View details United States Transportation / Travel / Logistics
    Ransomware 7-Eleven, Inc. (7-eleven.com) id28320 View details United States Retail / E-commerce
    Ransomware Carnival Corporation & plc (carnivalcorp.com) id28319 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware Zara (zara.com) id28318 View details Spain Retail / E-commerce
    Ransomware Alert 360 Opco Inc. (alert360.com) id28317 View details United States Services
    Ransomware Rockstar Games id28086 View details United States IT
    Ransomware Abrigo, Inc. id28085 View details United States Finance / Legal / Insurance
    Ransomware Marcus & Millichap, Inc. id28084 View details United States Construction / Real Estate
    Ransomware Kemper Corporation id28083 View details United States Finance / Legal / Insurance
    Ransomware Ryan, LLC. id28082 View details Finance / Legal / Insurance
    Ransomware McGraw Hill, Inc. (mheducation.com) id28081 View details United States Education
    Ransomware National Railroad Passenger Corporation (amtrak.com) id28080 View details United States Transportation / Travel / Logistics
    Ransomware Mytheresa id28079 View details Germany Retail / E-commerce
    Ransomware Cisco Systems, Inc. (cisco.com) id27796 View details United States IT
    Ransomware Hallmark Cards, Inc. & Hallmark Plus id27761 View details United States Retail / E-commerce
    Ransomware European Commission (*.europa.eu) id27648 View details Public Sector
    Ransomware BreachForums version 5 id27608 View details IT
    Ransomware ZenBusiness, Inc. id27578 View details United States Finance / Legal / Insurance
    Ransomware Berkadia Commercial Mortgage, LLC. (berkadia.com) id27558 View details United States Construction / Real Estate
    Ransomware Ameriprise Financial, Inc. id27518 View details United States
    Ransomware Infinite Campus, Inc. id27517 View details United States
    Ransomware Berkadia Commercial Mortgage LLC id27457 View details United States
    Ransomware Aura Group, Inc. (aura.com) id27345 View details United States
    Ransomware Aura Group, Inc id27279 View details United States Communication / Marketing
    Ransomware CFGI Management (cfgi.com) id27217 View details United States Services
    Ransomware Vertex Inc. id27216 View details United States Communication / Marketing
    Ransomware Salesforce Aura Campaign id27215 View details Retail / E-commerce
    Ransomware CFGI Management, LLC. id27114 View details United States Services
    Ransomware Pathstone.com id27113 View details United States Communication / Marketing
    Ransomware Woflow, Inc. id26996 View details United States Communication / Marketing
    Ransomware Pathstone Family Office, LLC id26886 View details United States Communication / Marketing
    Ransomware University of Pennsylvania id26787 View details United States Education
    Ransomware Harvard University id26786 View details United States Education
    Ransomware Figure Technology Solutions, Inc. id26785 View details United States IT
    Ransomware Canada Goose id26784 View details Canada Other
    Ransomware CarGurus, Inc. id26783 View details United States Communication / Marketing
    Ransomware Mercer Advisors id26782 View details United States Other
    Ransomware Beacon Pointe Advisors id26781 View details United States Communication / Marketing
    Ransomware Odido NL & Ben.nl id26780 View details Netherlands Other
    Ransomware Bumble Inc. id25896 View details United States Services
    Ransomware Match Group id25858 View details United States Services
    Ransomware Panera Bread id25836 View details United States Other
    Ransomware Edmunds.com, Inc. id25736 View details United States Communication / Marketing
    Ransomware CarMax, Inc. id25732 View details United States Communication / Marketing
    Ransomware SoundCloud id25719 View details Germany IT
    Ransomware Crunchbase, Inc. id25718 View details United States Communication / Marketing
    Ransomware Betterment, LLC. id25717 View details United States Communication / Marketing
    Ransomware Engie Resources id22969 View details United States Energy
    Ransomware Albertsons Companies, Inc. id22968 View details United States Retail / E-commerce
    Ransomware Qantas Airways Limited id22967 View details Australia Transportation / Travel / Logistics
    Ransomware Telstra id22894 View details Australia Communication / Marketing
    Ransomware Red Hat, Inc. id22820 View details United States IT
    Ransomware S&P Global (spglobal.com) id22817 View details United States Finance / Legal / Insurance
    Ransomware CIC Vietnam id22816 View details Viet Nam Services
    Ransomware IKEA id22786 View details Sweden Retail / E-commerce
    Ransomware Chanel id22785 View details France Communication / Marketing
    Ransomware TransUnion id22784 View details United States Finance / Legal / Insurance
    Ransomware Pandora.net id22783 View details Denmark IT
    Ransomware Cisco id22782 View details United States IT
    Ransomware Google Adsense id22781 View details United States Communication / Marketing
    Ransomware Air France & KLM id22780 View details France Transportation / Travel / Logistics
    Ransomware 1-800Accountant id22779 View details United States Services
    Ransomware Saks Fifth id22778 View details United States Retail / E-commerce
    Ransomware CarMax id22777 View details United States Communication / Marketing
    Ransomware Qantas Airways id22776 View details Australia Transportation / Travel / Logistics
    Ransomware TripleA (aaa.com) id22775 View details Singapore Services
    Ransomware Adidas id22774 View details Germany Communication / Marketing
    Ransomware Cartier id22773 View details France Communication / Marketing
    Ransomware Puma id22772 View details Germany Communication / Marketing
    Ransomware Petco id22771 View details United States Communication / Marketing
    Ransomware Instacart id22770 View details United States Retail / E-commerce
    Ransomware HBO Max id22769 View details United States Communication / Marketing
    Ransomware Kering (Gucci, Balenciaga, Brioni, AlexMcQ) id22768 View details France Construction / Real Estate
    Ransomware Engie Resources (Plymouth) id22767 View details United States Energy
    Ransomware Albertsons (Jewel Osco, etc) id22766 View details United States Retail / E-commerce
    Ransomware Instructure.com - Canvas id22765 View details United States IT
    Ransomware Fujifilm id22764 View details Japan Healthcare / Pharma
    Ransomware HMH (hmhco.com) id22763 View details United States Education
    Ransomware GAP, INC. id22762 View details United States Retail / E-commerce
    Ransomware ASICS id22761 View details Japan Healthcare / Pharma
    Ransomware KFC id22760 View details United States Retail / E-commerce
    Ransomware McDonalds id22759 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware Stellantis id22758 View details Netherlands Manufacturing / Engineering
    Ransomware Walgreens id22757 View details United States Healthcare / Pharma
    Ransomware Vietnam Airlines id22756 View details Viet Nam Transportation / Travel / Logistics
    Ransomware Marriott id22755 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware Home Depot id22754 View details United States Communication / Marketing
    Ransomware Aeroméxico id22753 View details Mexico Services
    Ransomware UPS id22752 View details United States Transportation / Travel / Logistics
    Ransomware Republic Services id22751 View details United States Public Sector
    Ransomware Disney/Hulu id22750 View details United States Communication / Marketing
    Ransomware FedEx id22749 View details United States Transportation / Travel / Logistics
    Ransomware Toyota Motor Corporations id22748 View details Japan Communication / Marketing