ShinyHunters claim that Ryan, LLC has had over 4.8 million Salesforce records containing PII and other internal corporate data compromised, with a demand to pay or face a leak. The message warns of a final deadline to reach out by 14 Apr 2026, threatening leakage and ongoing digital problems if payment is not made. #UnitedStates
Incident Details
- Victim: Ryan, LLC.
- Sector: Business Services
- Country:
- Actor: shinyhunters
- Source:
- Discovered: 2026-04-12 02:10:07.239053
- Published: 2026-04-11 11:10:00.000000
Information
- shinyhunters claims to have compromised over 4.8M Salesforce records containing PII and other internal corporate data
- Extortion demand: “Pay or leak”
- Final warning instructing contact by 14 Apr 2026
- Threat to leak data and cause additional digital disruptions if deadline is missed
- Updated: 11 Apr 2026
- Warning message: “Make the right decision, don’t be the next headline”
Disclaimer: This post is based on public claims made by the ransomware group "shinyhunters". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.