Latest ShinyHunters news

ShinyHunters has publicly disavowed the operators behind every recent BreachForums reboot, calling the aliases N/A and Indra false personas. Resecurity flagged the January user database as likely disinformation. No publicly verified admin identity exists six months after the FBI seizure.

CERT-EU traced the European Commission's cloud breach to a poisoned Trivy build pushed by TeamPCP on March 19. AI startup Mercor confirmed a separate hit via LiteLLM. ShinyHunters and Lapsus$ are now publishing stolen data from both victims.

Roughly 100 GB of customer data reportedly stolen from Crunchyroll through a compromised Telus Digital employee in India. The breach traces through a three-link supply chain starting with the 2025 Salesloft Drift compromise. Crunchyroll has been silent for 11 days.