ShinyHunters claimed their ransomware operations and infrastructure are “completely fine” despite disinformation, threatening that victim data remains in their possession and could be published. The actor also urged organizations in negotiations to resume serious discussions to avoid publication, ending the statement with #.
Incident Details
- Victim: WARNING
- Sector: Not Found
- Country:
- Actor: shinyhunters
- Source:
- Discovered: 2026-09-30T00:02:19.941717+00:00
- Published: 2026-09-30T00:02:18.481159+00:00
Information
- We are issuing this statement to correct false rumors and confirm that we are fine.
- Our operations and infrastructure remain fully intact and will continue as normal.
- Organizations negotiating with us should not assume we are falling apart; that assumption is wrong.
- We are ready to make an example of organizations that think they can avoid paying us tens of millions of dollars.
- For organizations still in contact with us, your data remains in our possession and may still be published.
- There is still a chance to prevent publication, but negotiations must be taken seriously again.
Disclaimer: This post is based on public claims made by the ransomware group "shinyhunters". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.