🏹 ShinyHunters — Ransomware
ShinyHunters is a financially motivated data-theft and extortion group active since 2020, responsible for high-profile breaches including Ticketmaster (via Snowflake) and PowerSchool; by 2025 they launched a RaaS offering called "shinysp1d3r," and in August 2025 French authorities arrested four members.
Classification
Ransomware
Leak-site victims
139
Ransomware.live
Associated IoCs
0
local intel
MITRE techniques
—
ATT&CK
Tracked
Yes
Ransomware.live
🔥 Leak-Site Victims (139)
| Victim | Country | Published | Domain |
|---|---|---|---|
| Ali** ********** | 2026-08-09T09:29:48.912411+00:00 | — | |
| Lumenis Ltd. | IL | 2026-08-02T00:00:00+00:00 | lumenis.com |
| Questel SAS | FR | 2026-08-02T00:00:00+00:00 | questel.com |
| Alcon Inc. | CH | 2026-08-02T00:00:00+00:00 | alcon.com |
| RingCentral, Inc. | US | 2026-07-27T12:59:16.314722+00:00 | ringcentral.com |
| BH Security, LLC. (brinkshome.com) | US | 2026-07-27T12:59:37.615461+00:00 | brinkshome.com |
| Abbott owned Exact Sciences Corporation | US | 2026-07-15T00:00:53.184855+00:00 | — |
| Fluke Corporation | US | 2026-07-01T10:29:35.641583+00:00 | fluke.com |
| Ingram Content Group, Inc. | US | 2026-07-01T10:29:15.696670+00:00 | ingramcontent.com |
| Adapt****** | 2026-06-24T18:53:58.181519+00:00 | — | |
| icsecurity.com | US | 2026-06-18T15:26:05.165910+00:00 | icsecurity.com |
| Amazon owned OneMedical.com | US | 2026-06-18T04:25:53.703254+00:00 | OneMedical.com |
| NAIC.org | US | 2026-06-18T04:25:34.083874+00:00 | NAIC.org |
| Ralph Lauren | US | 2026-06-16T12:54:26.245120+00:00 | ralphlauren.com |
| icc.edu | US | 2026-06-15T19:28:42.875643+00:00 | icc.edu |
| moody.edu | US | 2026-06-15T19:28:21.622452+00:00 | moody.edu |
| hccs.edu | US | 2026-06-15T14:24:26.386019+00:00 | hccs.edu |
| kodak.com | US | 2026-06-15T14:24:05.001960+00:00 | kodak.com |
| Deep Well Services | 2026-06-15T14:23:44.407428+00:00 | — | |
| Sysco Corporation | US | 2026-06-15T14:23:24.824525+00:00 | — |
| coe.int | FR | 2026-06-14T00:54:51.834700+00:00 | coe.int |
| Madison Square Garden Sports Corp. | US | 2026-06-12T06:58:09.773450+00:00 | — |
| JCPenney & several other subsdiaries under Catalyst Brands & Authentic Brands Group | US | 2026-06-12T06:57:49.369187+00:00 | — |
| American Tower Corporation | US | 2026-06-12T06:57:29.950490+00:00 | — |
| Zayo.com & Allstream.com | US | 2026-06-12T06:57:10.328206+00:00 | — |
| Nexstar.tv | US | 2026-06-11T09:54:44.265909+00:00 | Nexstar.tv |
| Ralph Lauren Corporation | US | 2026-06-11T09:54:27.397662+00:00 | ralphlauren.com |
| nottingham.ac.uk | GB | 2026-06-09T19:26:21.804789+00:00 | nottingham.ac.uk |
| DentaQuest, LLC. | US | 2026-05-30T02:05:45.304277+00:00 | dentaquest.com |
| BCD Travel | NL | 2026-05-29T13:24:06.881892+00:00 | — |
| DentaQuest, LLC | US | 2026-05-28T07:23:39.480444+00:00 | dentaquest.com |
| Baker Distributing Company | US | 2026-05-23T00:24:53.418510+00:00 | bakerdist.com |
| DentaQuest.com | US | 2026-05-23T00:24:22.457787+00:00 | DentaQuest.com |
| Houghton Mifflin Harcourt Company | US | 2026-05-09T08:56:53.056312+00:00 | hmhco.com |
| Adelante Soluciones Financieras (Addi.com) | CO | 2026-05-05T06:26:21.969208+00:00 | Addi.com |
| Cushman & Wakefield Inc. | US | 2026-05-03T03:25:36.734412+00:00 | cushmanwakefield.com |
| Instructure Holdings, Inc. (Canva LMS, instructure.com) | US | 2026-05-03T17:23:58.446567+00:00 | instructure.com |
| Instructure.com - Canvas | US | 2025-10-03T15:46:11.588316+00:00 | instructure.com |
| TOWERPOINT WEALTH, LLC | US | 2026-04-30T22:27:31.659532+00:00 | towerpointwealth.com |
| Follett Software LLC | US | 2026-04-30T22:27:28.967408+00:00 | follettsoftware.com |
| Vimeo, Inc. | US | 2026-04-28T06:41:15.503409+00:00 | vimeo.com |
| Udemy, Inc. (udemy.com) | US | 2026-04-24T07:59:05.804976+00:00 | udemy.com |
| Ernst & Young | US | 2026-07-27T12:58:56.004876+00:00 | ey.com |
| ADT, Inc. (adt.com) | US | 2026-04-24T07:58:41.887490+00:00 | adt.com |
| Aman Resorts (aman.com) | SG | 2026-04-19T18:07:28.126202+00:00 | aman.com |
| The Canada Life Assurance Company (canadalife.com) | CA | 2026-04-19T18:07:04.416161+00:00 | canadalife.com |
| Pitney Bowes Inc. (pb.com) | US | 2026-04-19T18:06:39.292399+00:00 | pb.com |
| 7-Eleven, Inc. (7-eleven.com) | US | 2026-04-19T18:06:36.031139+00:00 | 7-eleven.com |
| Zara (zara.com) | ES | 2026-04-19T18:05:49.044969+00:00 | zara.com |
| Alert 360 Opco Inc. (alert360.com) | US | 2026-04-19T18:05:25.063031+00:00 | alert360.com |
| Carnival Corporation & plc (carnivalcorp.com) | US | 2026-04-19T18:06:12.544038+00:00 | carnivalcorp.com |
| Abrigo, Inc. | US | 2026-04-12T02:10:17.909701+00:00 | — |
| Marcus & Millichap, Inc. | US | 2026-04-12T02:10:14.758973+00:00 | — |
| Kemper Corporation | US | 2026-04-12T02:10:11.566188+00:00 | — |
| Ryan, LLC. | 2026-04-12T02:10:07.239053+00:00 | — | |
| McGraw Hill, Inc. (mheducation.com) | US | 2026-04-12T02:10:02.546277+00:00 | mheducation.com |
| National Railroad Passenger Corporation (amtrak.com) | US | 2026-04-12T02:09:39.130840+00:00 | amtrak.com |
| Mytheresa | DE | 2026-04-12T02:09:15.349672+00:00 | — |
| Rockstar Games | US | 2026-04-12T02:10:20.798443+00:00 | rockstargames.com |
| Charter Communications, Inc. | US | 2026-05-23T00:24:34.890391+00:00 | charter.com |
| Hallmark Cards, Inc. & Hallmark Plus | US | 2026-03-31T02:16:16.310125+00:00 | — |
| European Commission (*.europa.eu) | 2026-03-28T20:23:34.617099+00:00 | — | |
| BreachForums version 5 | 2026-03-26T23:52:24.017270+00:00 | — | |
| ZenBusiness, Inc. | US | 2026-03-26T04:54:52.702776+00:00 | zenbusiness.com |
| Berkadia Commercial Mortgage, LLC. (berkadia.com) | US | 2026-03-24T20:35:32.901048+00:00 | berkadia.com |
| Ameriprise Financial, Inc. | US | 2026-03-22T21:09:04.059634+00:00 | — |
| Infinite Campus, Inc. | US | 2026-03-22T21:08:59.405984+00:00 | — |
| Berkadia Commercial Mortgage LLC | US | 2026-03-20T05:50:29.672287+00:00 | — |
| Aura Group, Inc. (aura.com) | US | 2026-03-15T09:23:48.419799+00:00 | aura.com |
| Aura Group, Inc | US | 2026-03-12T00:04:16.724981+00:00 | — |
| CFGI Management (cfgi.com) | US | 2026-03-09T21:18:38.341539+00:00 | cfgi.com |
| Vertex Inc. | US | 2026-03-09T21:18:14.630107+00:00 | — |
| Salesforce Aura Campaign | 2026-03-09T21:18:11.218414+00:00 | — | |
| CFGI Management, LLC. | US | 2026-03-06T03:47:31.065245+00:00 | — |
| Pathstone.com | US | 2026-03-06T03:47:26.930244+00:00 | Pathstone.com |
| Woflow, Inc. | US | 2026-03-03T04:46:05.244779+00:00 | — |
| Pathstone Family Office, LLC | US | 2026-02-27T02:34:35.769512+00:00 | — |
| Odido NL & Ben.nl | NL | 2026-02-24T12:13:20.305257+00:00 | — |
| CarGurus, Inc. | US | 2026-02-24T12:13:32.030905+00:00 | — |
| Mercer Advisors | US | 2026-02-24T12:13:27.962713+00:00 | — |
| Canada Goose | CA | 2026-02-24T12:13:34.957911+00:00 | canadagoose.com |
| Figure Technology Solutions, Inc. | US | 2026-02-24T12:13:37.911784+00:00 | — |
| University of Pennsylvania | US | 2026-02-24T12:13:44.874091+00:00 | — |
| Harvard University | US | 2026-02-24T12:13:41.650816+00:00 | — |
| Beacon Pointe Advisors | US | 2026-02-24T12:13:23.913363+00:00 | beaconpointe.com |
| Bumble Inc. | US | 2026-01-28T20:46:25.167402+00:00 | — |
| Match Group | US | 2026-01-27T22:44:04.393877+00:00 | — |
| Engie Resources | US | 2025-10-11T04:35:31.829443+00:00 | — |
| Albertsons Companies, Inc. | US | 2025-10-11T04:34:53.232026+00:00 | — |
| Telstra | AU | 2025-10-08T16:12:23.675543+00:00 | — |
| S&P Global (spglobal.com) | US | 2025-10-05T10:48:21.745815+00:00 | spglobal.com |
| CIC Vietnam | VN | 2025-10-05T10:47:39.273802+00:00 | pcb.vn |
| Edmunds.com, Inc. | US | 2026-01-24T02:35:22.467150+00:00 | — |
| CarMax, Inc. | US | 2026-01-24T00:35:38.718199+00:00 | carmax.com |
| Betterment, LLC. | US | 2026-01-23T14:42:43.941428+00:00 | — |
| Crunchbase, Inc. | US | 2026-01-23T14:42:47.604252+00:00 | — |
| Red Hat, Inc. | US | 2025-10-05T19:21:37.562380+00:00 | redhat.com |
| Home Depot | US | 2025-10-03T15:41:40.006806+00:00 | homedepot.com |
| UPS | US | 2025-10-03T15:40:58.849289+00:00 | — |
| FedEx | US | 2025-10-03T15:39:51.141970+00:00 | fedex.com |
| 1-800Accountant | US | 2025-10-03T15:51:37.228763+00:00 | 1800accountant.com |
| Fujifilm | JP | 2025-10-03T15:45:47.177922+00:00 | fujifilm.com |
| Marriott | US | 2025-10-03T15:42:00.995792+00:00 | marriott.com |
| SoundCloud | DE | 2026-01-23T14:42:50.636937+00:00 | — |
| Stellantis | NL | 2025-10-03T15:43:18.142178+00:00 | stellantis.com |
| Air France & KLM | FR | 2025-10-03T15:51:58.492201+00:00 | airfranceklm.com |
| Cisco | US | 2025-10-03T15:52:44.822972+00:00 | cisco.com |
| Engie Resources (Plymouth) | US | 2025-10-03T15:46:56.662788+00:00 | engieresources.com |
| Albertsons (Jewel Osco, etc) | US | 2025-10-03T15:46:35.017231+00:00 | albertsonscompanies.com |
| Walgreens | US | 2025-10-03T15:42:44.826112+00:00 | walgreens.com |
| HMH (hmhco.com) | US | 2025-10-03T15:45:25.374686+00:00 | hmhco.com |
| Aeroméxico | MX | 2025-10-03T15:41:21.840388+00:00 | aeromexico.com |
| Pandora.net | DK | 2025-10-03T15:53:25.570623+00:00 | Pandora.net |
| Google Adsense | US | 2025-10-03T15:52:23.224088+00:00 | adsense.google.com |
| Republic Services | US | 2025-10-03T15:40:36.633944+00:00 | republicservices.com |
| Qantas Airways | AU | 2025-10-03T15:50:30.409380+00:00 | qantas.com |
| TransUnion | US | 2025-10-03T15:53:50.284272+00:00 | transunion.com |
| Chanel | FR | 2025-10-03T15:54:10.977331+00:00 | chanel.com |
| McDonalds | US | 2025-10-03T15:43:38.401890+00:00 | mcdonalds.com |
| KFC | US | 2025-10-03T15:43:58.642880+00:00 | — |
| Vietnam Airlines | VN | 2025-10-03T15:42:24.947789+00:00 | vietnamairlines.com |
| GAP, INC. | US | 2025-10-03T15:44:41.914314+00:00 | — |
| ASICS | JP | 2025-10-03T15:44:19.136062+00:00 | asics.com |
| CarMax | US | 2025-10-03T15:50:51.162218+00:00 | carmax.com |
| TripleA (aaa.com) | SG | 2025-10-03T15:50:01.475351+00:00 | aaa.com |
| Puma | DE | 2025-10-03T15:48:38.593732+00:00 | puma.com |
| HBO Max | US | 2025-10-03T15:47:37.882868+00:00 | hbomax.com |
| Instacart | US | 2025-10-03T15:47:58.259466+00:00 | instacart.com |
| Disney/Hulu | US | 2025-10-03T15:40:12.543171+00:00 | thewaltdisneycompany.com |
| Toyota Motor Corporations | JP | 2025-10-03T15:39:26.231495+00:00 | toyota.com |
| Cartier | FR | 2025-10-03T15:48:59.196794+00:00 | cartier.com |
| IKEA | SE | 2025-10-03T15:54:30.065707+00:00 | ikea.com |
| Saks Fifth | US | 2025-10-03T15:51:12.529355+00:00 | saksfifthavenue.com |
| Adidas | DE | 2025-10-03T15:49:18.893106+00:00 | adidas.de |
| Petco | US | 2025-10-03T15:48:18.345150+00:00 | petco.com |
| Cisco Systems, Inc. (cisco.com) | US | 2026-04-01T13:14:13.378173+00:00 | cisco.com |
| Kering (Gucci, Balenciaga, Brioni, AlexMcQ) | FR | 2025-10-03T15:47:16.885077+00:00 | kering.com |
| Panera Bread | US | 2026-01-27T00:19:55.310534+00:00 | panerabread.com |
| glendale.edu | US | 2026-06-15T19:28:01.066240+00:00 | glendale.edu |
Source: Ransomware.live leak-site monitoring (cached, offline-safe).
📁 Case Management
🏹 Campaigns & malware
🏹 Add to case
🧩 Advanced Capabilities
Live group profile & victims via Ransomware.live; ATT&CK technique hints are a static reference for well-known groups. All network calls cached & offline-safe.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports
🤖 AI Copilot
⚡ AI Skills
🔍 Lookup & Enrich
📚 Docs & Reports
💡 Recommendations
- Explore related tools below
- Automate recurring work via cron