- ShinyHunters reportedly leaked sensitive data from around 40 major organizations, including retailers, insurers, and hospitality firms.
- The leaks allegedly involve millions of records and terabytes of internal data, with Medtronic alone linked to nine million compromised records.
- The group has abandoned encryption, focusing solely on data exfiltration, and vows to keep stolen information accessible on criminal platforms.
The infamous ransomware operators ShinyHunters apparently went on a leaking spree earlier this week, publishing sensitive data on roughly 40 different organizations.
In a newly released report, Cybernews says that the group leaked data from Mytheresa, Zara, Carnival, 7-Eleven, Pitney Bowes, The Canada Life Assurance Company, and Hallmark. These are all major organizations with millions of customers. Medtronic, Aman Resorts, and Marcus & Millichap were also mentioned as having their data published, among others.
When it comes to the types of data allegedly leaked, Cybernews mentions personally identifiable information (PII), customer data, transactional history, internal corporate data, and large-scale datasets including millions of records and terabytes of information.
Article continues below
Leaving the data "indefinitely"
For Medtronic specifically, nine million records of PII were mentioned, as well as internal corporate data.
“The extortion group made good on its promise to publish reams of data it claims to have stolen from the four victims – roughly 38 million records in total, as well as “terabytes” of internal corporate data,” Cybernews reported.
The earliest listing was January 23, 2026, the publication further stated, while the newest one was earlier this week.
It also said that Medtronic has been removed from the leak site in the meantime, suggesting that the company either paid the ransom, or is currently negotiating the release of the files.
For the others, ShinyHunters promises the data will remain on the site “indefinitely”:
“We will make sure every corner of the criminal underground world has your data and is abusing it,” the group allegedly said.
ShinyHunters is currently one of the most active ransomware operators out there. The group completely abandoned the encryption part of the attack and focuses solely on data exfiltration. Apparently, it is cheaper and easier to maintain, while being equally lucrative.
The group recently released files stolen from Rockstar Games, as well.
Via Cybernews
Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.