Ransomware needs a way in. Stolen credentials are the cheapest one.

Final statement re PSA Ransomware Attack

Ransomware victimData extortion

shinyhuntersGroup

—Country

Sep 24, 2026Discovered

Overview

View group profile

Industry

Education

Discovered

11 days ago

Attack date

Sep 24, 2026

Confidence

90%

Severity

Medium

Status

Claimed

Threat group

shinyhunters

Total victims

115

First seen

Oct 2025

Last seen

Oct 2026

Group status

active

Sophistication

Impact score

120

Threat level

5.8/10

Aggressiveness8/10

Lethality2.6/10

Criticality6.9/10

Status breakdown

Data Leaked51.3%59

Negotiating2.6%3

Claimed

this victim

46.1%53

Targeted sectors

Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Education

Known target sector

Other victims

View all (115)

Same group · shinyhunters

DexCom, Inc.
—
Claimed
O'Reilly Automotive
—
Claimed
WARNING
—
Negotiating
Final statement re PSA
—
Claimed
PRESS RELEASE RE PSA
United States
Data Leaked
Fresenius Medical Care
Germany
Claimed

Group activity

Monthly attacks · shinyhunters

115

total · avg 10.5/mo