Ransomware needs a way in. Stolen credentials are the cheapest one.

Note to Cl0p-_- Ransomware Attack

Ransomware victimData extortion

shinyhuntersGroup

—Country

Sep 20, 2026Discovered

Overview

View group profile

Industry

Government & Defense

Discovered

19 days ago

Attack date

Sep 19, 2026

Confidence

90%

Severity

Medium

Status

Claimed

Threat group

shinyhunters

Total victims

112

First seen

Jan 2026

Last seen

Oct 2026

Group status

active

Sophistication

Impact score

120

Threat level

5.5/10

Aggressiveness7/10

Lethality2.6/10

Criticality7.1/10

Status breakdown

Data Leaked52.7%59

Negotiating2.7%3

Claimed

this victim

44.6%50

Targeted sectors

Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Government & Defense

Known target sector

Other victims

View all (112)

Same group · shinyhunters

DexCom, Inc.
—
Claimed
O'Reilly Automotive
—
Claimed
WARNING
—
Negotiating
Final statement re PSA
—
Claimed
PRESS RELEASE RE PSA
United States
Data Leaked
Fresenius Medical Care
Germany
Claimed

Group activity

Monthly attacks · shinyhunters

112

total · avg 11.2/mo