Ransomware needs a way in. Stolen credentials are the cheapest one.

Note to mr. databroker1 NEXUS DL Service Ransomware Attack

Ransomware victimData extortion

shinyhuntersGroup

—Country

Sep 4, 2026Discovered

Overview

View group profile

Industry

Financial Services

Discovered

6 days ago

Confidence

70%

Severity

Medium

Status

Claimed

Threat group

shinyhunters

Total victims

112

First seen

Sep 2025

Last seen

Sep 2026

Group status

active

Sophistication

Impact score

118

Threat level

5.7/10

Aggressiveness8/10

Lethality2.6/10

Criticality6.5/10

Status breakdown

Data Leaked51.8%58

Negotiating1.8%2

Claimed

this victim

46.4%52

Targeted sectors

Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Financial Services

Known target sector

Other victims

View all (112)

Same group · shinyhunters

State of Florida DMV
United States
Claimed
Medela
Switzerland
Data Leaked
Note to mr. databroker1 NEXUS DL Service
—
Claimed
Neogen Corporation
United States
Data Leaked
McKesson Corporation
United States
Data Leaked
Elekta AB
Sweden
Data Leaked

Group activity

Monthly attacks · shinyhunters

112

total · avg 10.2/mo