ShinyHunters

A hacker known as Cyberleek leaked gameplay clips and the full map of Grand Theft Auto VI to protest Rockstar Games’ digital-only pre-order policy, arguing it exploits consumers. The hacker demands a public apology and policy changes, threatening to release the game’s ending. Rockstar issued DMCA takedowns, but leaks persist. The incident highlights tensions over the industry’s shift away from physical media, with GTA VI not releasing until November.

16 reports · 5 sources · Updated Aug 27, 03:11 PM UTC

This week saw significant cybersecurity disruptions, headlined by the massive ransomware attack on Canvas, an online learning platform used by over 9,000 schools. The breach locked users out during finals, prompting parent company Infrastructure to pay the hacker group ShinyHunters to restore services and delete stolen data. This decision has drawn criticism for encouraging future ransomware crimes and may not prevent impending class-action lawsuits. In artificial intelligence security, researchers identified hackers using AI to discover zero-day vulnerabilities, though Google successfully intervened to patch a targeted flaw. Meanwhile, Microsoft developed an internal AI model that rapidly identified numerous Windows vulnerabilities. Additionally, a concerning trend emerged where AI chatbots, including Google's Gemini, are inadvertently disclosing individuals' private phone numbers and personal information when prompted, leading to a surge in privacy removal requests. These incidents highlight growing challenges in digital security, ranging from corporate ransomware responses to the unintended privacy risks posed by large language models trained on public data.

1 reports · 1 sources

The Google Threat Intelligence Group (GTIG) has released a detailed analysis of UNC6671, a threat actor operating under the "BlackFile" brand, which conducts sophisticated extortion campaigns against organizations globally. Emerging in early 2026, this group targets dozens of entities in North America, Australia, and the UK, focusing on Microsoft 365 and Okta infrastructure. The attackers utilize high-volume voice phishing (vishing) combined with adversary-in-the-middle (AiTM) techniques to bypass traditional perimeter defenses and multi-factor authentication (MFA). By masquerading as IT support personnel and directing victims to credential-harvesting sites, they gain deep access to cloud environments. Once inside, they employ Python and PowerShell scripts to exfiltrate sensitive corporate data for extortion. Although UNC6671 has occasionally co-opted the ShinyHunters brand, GTIG confirms their operations are independent, citing unique communication channels and domain registration patterns. The report emphasizes that these breaches result from social engineering rather than vendor vulnerabilities, urging organizations to adopt phishing-resistant MFA solutions to protect their identity platforms and SaaS applications from such identity-centric threats.

1 reports · 1 sources

Hong Kong’s Office of the Privacy Commissioner for Personal Data (PCPD) has strongly advised against paying ransoms to hackers following a significant cyberattack on the education management platform Canvas. The breach compromised the personal data of approximately 72,000 students and staff across seven local institutions, including names, email addresses, and student IDs. Privacy Commissioner Ada Chung condemned the potential payment of ransoms, arguing that such practices fund illegal activities and do not guarantee data safety. She warned that yielding to extortion could signal vulnerability to other cybercriminals. The incident is part of a broader global attack orchestrated by the hacker group ShinyHunters, which affected nearly 9,000 educational institutions worldwide and involved 3.5 terabytes of data from 275 million users. While Instructure, the developer of Canvas, confirmed an agreement with the hackers, it remains unclear if a ransom was paid. ShinyHunters claimed to have deleted the stolen data. Currently, there is no evidence of public data leaks. The PCPD advises organizations using Canvas to enhance system protections and remove sensitive information while Instructure completes its incident review.

1 reports · 1 sources

Instructure, the education technology company behind Canvas, recently announced an agreement with the ShinyHunters cybercrime group following a massive data breach affecting approximately 275 million students, teachers, and staff. The company assured users that stolen private chats and email addresses were destroyed, citing digital confirmation from the attackers. However, cybersecurity experts and threat intelligence analysts strongly dispute this claim. Specialists from Recorded Future and the Halcyon Ransomware Research Center argue that ransomware groups rarely delete data permanently, often recycling it for future extortion or phishing campaigns. They describe Instructure's assurance as part of a 'Ransomware Trust Paradox,' where criminals maintain a facade of integrity to ensure future payments while likely retaining copies of the data. Experts predict targeted phishing attacks against the educational community in the coming year using the leaked information. Although Instructure did not explicitly confirm a ransom payment, industry insiders estimate the settlement ranged between $5 million and $30 million. This incident highlights the difficult operational decisions institutions face during critical periods like finals week, despite FBI recommendations against paying ransoms.

1 reports · 1 sources

Edtech company Instructure paid a ransom to the ShinyHunters cybercrime group following two major data breaches of its Canvas learning platform. The attacks compromised 275 million records from nearly 9,000 educational institutions globally, exposing names, emails, and private messages. While Instructure secured digital proof of data destruction to prevent further extortion, the incident triggered service disruptions, class-action lawsuits, and a US Congressional investigation into the company’s cybersecurity failures and decision to negotiate with hackers.

10 reports · 9 sources · Updated May 16, 06:00 PM UTC

Cybersecurity experts have criticized Instructure, the company behind the Canvas learning platform, for reaching an agreement with the ShinyHunters hacking group following a massive data breach. The incident compromised personal information of approximately 275 million users across 9,000 educational institutions in countries including the US, Australia, Canada, and New Zealand. While Instructure claims the deal resulted in the return and destruction of stolen data, reports suggest a ransom of around US$10 million may have been paid. Experts warn that paying ransoms marks organizations as easy targets, potentially adding them to criminal 'sucker lists' for future extortion attempts. Australia’s National Cyber Security Coordinator emphasized that cybercriminals cannot be trusted, noting that payments do not guarantee data recovery or prevent leaks. Furthermore, verifying the complete deletion of copied data is nearly impossible. The breach has already triggered multiple lawsuits against Instructure’s owner, KKR. Authorities and academics argue that such payments reinforce criminal business models and increase the risk of subsequent attacks by both original perpetrators and copycats, urging organizations to resist negotiation despite the immediate pressure.

1 reports · 1 sources

Steve Daly, the CEO of educational technology company Instructure, has been summoned to testify before the US House Committee on Homeland Security regarding a significant cybersecurity breach affecting its Canvas learning platform. The hearing, scheduled for May 21, 2026, will address the details of two separate attacks by the hacker group ShinyHunters, which compromised data belonging to approximately 275 million individuals, including students and staff at major universities like Harvard and MIT. Key topics of discussion will include the volume of stolen data, containment measures, customer notification processes, and the controversial decision by Instructure to pay a ransom to the attackers. This congressional scrutiny highlights growing legislative concern over cybersecurity failures in the education sector and the implications of paying ransoms to cybercriminal groups. The breach initially surfaced in early May 2026, leading to widespread disruption for schools and raising serious questions about data protection protocols within major edtech providers.

1 reports · 1 sources

U.S. House lawmakers are demanding that Instructure, the education technology company behind the Canvas learning platform, testify regarding two recent cyberattacks that compromised the personal data of millions of students worldwide. The House Homeland Security Committee, led by Representative Andrew Garbarino, is investigating how hackers repeatedly breached Instructure’s systems and exploited the same vulnerability to steal sensitive information and deface school login pages. The committee seeks details on the types of data stolen, the company’s incident response capabilities, and its coordination with the Cybersecurity and Infrastructure Security Agency (CISA). Instructure recently confirmed it reached an agreement with the ShinyHunters hacker group, who claimed to have deleted the stolen data, though ransom amounts remain undisclosed. Security experts criticize this approach, warning that paying ransoms funds future attacks and does not guarantee data deletion. Garbarino highlighted serious concerns about Instructure’s inability to contain the threat after the initial intrusion, emphasizing the systemic vulnerabilities in educational technology infrastructure. As of now, Instructure has not confirmed whether CEO Steve Daly or other executives will comply with the request to testify before the committee.

1 reports · 1 sources

Education technology company Instructure has reached a controversial agreement with the hacker group ShinyHunters to recover customer data stolen during a recent cyberattack. The breach, which targeted Instructure's Canvas learning management system, potentially exposed the personal information, including names, email addresses, and private messages, of approximately 280 million users. ShinyHunters, known for previous high-profile attacks on companies like Rockstar and Nvidia, had threatened to leak the exfiltrated data if Instructure did not comply with their demands by a May 12 deadline. Instructure confirmed that the stolen data has been returned and received digital confirmation of its destruction, along with assurances that no customers would be extorted. However, the company defied explicit guidance from the FBI, which advises against paying ransoms to cybercriminals as it fuels further criminal activity and offers no guarantee of data recovery or safety. While Instructure stated this action was taken to provide peace of mind to its users, the specific financial terms of the deal remain undisclosed. This incident highlights the ongoing dilemma organizations face when balancing official law enforcement recommendations with the immediate pressure to protect sensitive user data from public exposure.

1 reports · 1 sources

Instructure, the company behind the Canvas online learning platform, announced it reached an agreement with hackers to delete stolen data following a significant cyberattack. The breach, claimed by the group ShinyHunters, forced the platform offline on May 7 during final exams for thousands of schools and universities, including the University of Minnesota. The attackers reportedly accessed data concerning 275 million people across nearly 9,000 institutions and had threatened to leak it unless a ransom was paid. While Instructure confirmed the agreement, it did not disclose whether a ransom was paid or identify the specific actors involved. This incident highlights growing cybersecurity vulnerabilities in educational technology infrastructure. The news report also briefly covers unrelated local Minnesota stories, including scrutiny of state employee awards, a nurses' strike authorization, and a new drone police pilot program, but the primary focus remains on the resolution of the high-profile Canvas security breach and its impact on the academic community.

1 reports · 1 sources

Instructure, the parent company of the educational platform Canvas, has reached an agreement with the hacking group ShinyHunters following a significant data breach. The deal ensures the return of stolen student and school data, digital confirmation of its destruction, and a commitment that no customers will face extortion. This resolution comes after ShinyHunters claimed to have stolen sensitive information, including names and messages, from nearly 9,000 schools. While Instructure stated the situation is resolved, cybersecurity experts suggest a ransom payment was likely made, highlighting the complex ethical dilemmas companies face during such incidents. The breach prompted temporary service interruptions and raised concerns among affected educational institutions. Additionally, the U.S. House Homeland Security Committee has requested a briefing from Instructure’s CEO regarding the intrusion, the extent of the data theft, and the company’s coordination with federal law enforcement agencies like CISA. This incident underscores ongoing vulnerabilities in educational technology infrastructure and the persistent threat posed by organized cybercriminal groups targeting large-scale data repositories for financial gain.

1 reports · 1 sources

Instructure, the parent company of the online learning platform Canvas, has reached an agreement with the cybercriminal gang ShinyHunters following a massive data breach affecting approximately 275 million users globally. The attack compromised personal data from 8,809 educational institutions, including over 120 in Australia such as the University of Melbourne and various state education departments. While Instructure did not explicitly confirm a ransom payment, it stated that stolen data was returned along with digital proof of deletion. Cybersecurity experts estimate the ransom likely ranged in the high single-digit millions of dollars, against an initial demand of $13 million. The breached data includes student IDs, names, email addresses, and private messages, though financial information and passwords were reportedly untouched. Former Australian cyber tsar Alastair MacGibbon criticized the move, suggesting the agreement implies a paid ransom and warning that criminal assurances regarding data deletion are often unreliable. This incident represents one of the largest breaches in the education sector, raising significant concerns about data privacy and the justification of paying ransoms to cybercriminals.

1 reports · 1 sources

A global cyberattack on the online learning platform Canvas has compromised the personal information of over 72,000 students and staff at seven educational institutions in Hong Kong. The Office of the Privacy Commissioner for Personal Data (PCPD) confirmed that the breach is part of a wider incident affecting nearly 9,000 institutions and 275 million users worldwide. Affected local entities include major universities such as City University of Hong Kong, Polytechnic University, and HKUST, along with several arts and construction institutes. The hacker group ShinyHunters allegedly demanded ransom from Canvas developer Instructure, which claimed to have reached an agreement to prevent public data leaks. However, local reports indicate that names, email addresses, student IDs, and messages may have been exposed. Cybersecurity officials have urged institutions to suspend platform use and remain vigilant against subsequent phishing attacks. The Hong Kong Computer Emergency Response Team is utilizing AI tools to identify related malicious websites, while police have received reports regarding the hack and associated fraud attempts.

1 reports · 1 sources

Instructure, the US parent company of the popular learning management system Canvas, announced it has reached an agreement with the ShinyHunters hacking group following a significant data breach. The hackers had stolen approximately 6.65 terabytes of data, including usernames, email addresses, course details, and messages from nearly 9,000 schools worldwide. ShinyHunters had previously threatened to release this information unless ransoms were paid by educational institutions. Instructure confirmed that the stolen data has been returned and received digital confirmation of its destruction, ensuring no customers will face extortion. CEO Steve Daly apologized for the disruption, which affected universities during final exam periods, causing some institutions like the University of Massachusetts at Dartmouth to postpone exams. Despite the breach, Instructure asserts that the Canvas platform remains fully operational and safe for use. The incident highlights ongoing cybersecurity vulnerabilities in the education sector, with ShinyHunters, a group reportedly composed of young adults from the US and UK, also linked to previous high-profile attacks such as the one on Ticketmaster.

1 reports · 1 sources

Dutch educational institutions continue to face frequent cyber attacks, with experts labeling them as inevitable targets due to the valuable data they hold. The recent hack of Canvas, a widely used educational platform, disrupted operations at Eindhoven University of Technology (TU/e) and other institutions, stealing personal data of 275 million users. This incident follows a pattern of attacks, including a 2025 breach at TU/e and ransomware incidents at Maastricht University and ROC Mondriaan. While SURF, the ICT cooperative for Dutch higher education, notes that education is not attacked more frequently than other sectors, Professor Harald Vranken highlights the inherent asymmetry in cybersecurity: defenders must secure all vulnerabilities, whereas attackers need only exploit one. The stolen data, comprising names, emails, and student records, is particularly attractive for future phishing campaigns targeting prospective highly educated individuals. Despite the severity, students often view these disruptions as merely annoying, though academic schedules are significantly impacted. The recurring nature of these breaches underscores the persistent vulnerability of the education sector to sophisticated cybercrime groups like Shinyhunters.

1 reports · 1 sources

Instructure’s Canvas platform suffered a major cyberattack by the ShinyHunters group, disrupting final exams for millions of students across nearly 9,000 educational institutions globally. The breach exploited a vulnerability in free teacher accounts, exposing sensitive data like names, emails, and private messages for approximately 275 million users. While core credentials remained secure, the incident caused widespread academic chaos and triggered multiple class-action lawsuits. Instructure ultimately reached a controversial agreement with the hackers to retrieve and destroy the stolen data, highlighting critical vulnerabilities in educational technology infrastructure.

21 reports · 18 sources · Updated May 12, 04:35 PM UTC

Global commercial real estate firm Cushman & Wakefield faces a proposed class action lawsuit filed by Illinois tenant Michelle Milewski following a significant data breach. The suit alleges the company failed to protect sensitive client information after hacker groups ShinyHunters and Qilin infiltrated its systems via a vishing attack. The breach reportedly exposed personal identifiable information, including social security numbers and financial data, leading to identity theft and fraud against Milewski. The plaintiff accuses the firm of negligence and failing to implement industry-standard cybersecurity measures. Cushman & Wakefield has dismissed the lawsuit as baseless, stating the incident was limited in scope and that they did not engage with the hackers' demands. The case was filed in New York, where the company maintains a major office. This legal challenge adds to recent troubles for the firm, which also faces a separate class action from a former employee regarding climate-related financial risks in its 401(k) plan. The incident highlights growing concerns over corporate data security and the severe consequences of cyberattacks on personal privacy and financial stability.

1 reports · 1 sources

Instructure, the developer of the widely used Canvas Learning Management System (LMS), suffered a significant cybersecurity breach attributed to the extortion group ShinyHunters. The attack, which exploited a vulnerability in the platform's 'Free-For-Teacher' service, resulted in the theft of 3.65 terabytes of data affecting approximately 275 million students, teachers, and staff across 8,809 educational institutions globally. While Instructure stated that sensitive financial information and passwords were not compromised, personal details such as names, email addresses, and student IDs were exposed. ShinyHunters threatened to leak the data and defaced login pages of hundreds of institutions, causing widespread disruption to academic activities, including exam postponements at universities like Penn State and Idaho State. The incident highlights critical vulnerabilities in educational technology infrastructure and the risks of centralized data systems. Experts warn of potential follow-on phishing campaigns targeting affected communities. Despite Instructure's efforts to patch security flaws and revoke access tokens, the breach has sparked panic among users and raised serious concerns about data privacy and institutional resilience in the education sector.

1 reports · 1 sources

Instructure, the parent company of the educational platform Canvas, has reached an agreement with the hacking group ShinyHunters following a significant data breach. Announced on May 11, 2026, the deal ensures the return of all stolen student and school data to the company, accompanied by digital confirmation of its destruction. Crucially, the agreement stipulates that no Instructure customers will face extortion attempts, either publicly or privately, regarding this incident. A representative for ShinyHunters confirmed to Reuters that the data has been deleted and that the company and its users will not be targeted for payment. This resolution covers all impacted customers, eliminating the need for individual engagements with the hackers. Despite this settlement, regulatory scrutiny persists. The US House Homeland Security Committee has requested a briefing from Instructure CEO Steve Daly to address the multiple intrusions, the extent of the data theft, the company's response measures, and its coordination with federal agencies like CISA. Instructure has not yet commented on the congressional request or the specific terms of the agreement with the hacking group.

1 reports · 1 sources

Instructure, the parent company of the educational platform Canvas, has reached an agreement with the hacking group ShinyHunters following a significant data breach. The deal ensures the return of stolen student and school data, digital confirmation of its destruction, and a commitment that no customers will face extortion. ShinyHunters, which claimed responsibility for stealing data from nearly 9,000 schools, confirmed via Reuters that the data is deleted and that they will not target Instructure or its clients further. While Instructure did not disclose financial details, cybersecurity experts suggest a ransom payment was likely made to secure the data. The breach had previously caused disruptions, with students receiving notes from the hackers and the platform going offline temporarily. Amidst this resolution, the US House Homeland Security Committee has requested a briefing from Instructure’s CEO regarding the incident, the extent of the data theft, and the company's coordination with federal law enforcement agencies like CISA. This development highlights the ongoing challenges educational technology providers face regarding cybersecurity threats and the complex decisions involved in negotiating with cybercriminal groups.

1 reports · 1 sources

Ed-tech giant Instructure paid a ransom to the ShinyHunters cybercrime group following two major breaches of its Canvas learning platform. The attacks disrupted services for thousands of educational institutions globally, including in Australia, the US, and Europe, affecting millions of students during critical exam periods. While Instructure secured the return and destruction of 3.5 terabytes of stolen data, the incident sparked a US Congressional investigation and highlighted severe vulnerabilities in educational infrastructure. Authorities advised against paying ransoms, but Instructure prioritized data recovery despite the controversy.

12 reports · 10 sources · Updated May 15, 09:21 AM UTC

Instructure, the developer of the widely used educational platform Canvas, announced an agreement with the cybercriminal group ShinyHunters following a significant data theft and extortion attempt. The attackers had threatened to leak sensitive data from over 8,800 school systems, affecting approximately 275 million records. The standoff escalated when ShinyHunters defaced login pages and injected extortion messages, forcing Instructure to temporarily take Canvas offline, which disrupted academic activities nationwide. Although Instructure did not explicitly confirm paying a ransom, the company stated that the stolen data was returned and verified as destroyed, with assurances that no customers would face further extortion. CEO Steve Daly apologized for inconsistent communication during the crisis. The incident has drawn scrutiny from US lawmakers, with the House Homeland Security Committee requesting a briefing on Instructure's incident response capabilities and security measures. Federal agencies like CISA are aware of the situation and offering voluntary support. The breach exposed usernames and enrollment information, though course content and credentials reportedly remained secure.

1 reports · 1 sources

Ed-tech giant Instructure has acknowledged two separate security intrusions affecting its Canvas online learning platform within a two-week period. The attacks, attributed to the data-theft group ShinyHunters, exploited a vulnerability in the Free-for-Teacher system, leading to significant service disruptions during final exams. While Instructure restored full service by May 10, the hackers claim to have stolen 3.65 TB of data comprising approximately 275 million records from nearly 9,000 educational institutions globally, including prestigious universities like Harvard and Stanford. Compromised information includes usernames, email addresses, and course enrollment details, though core academic submissions and credentials remain secure. ShinyHunters has issued a final pay-or-leak deadline of May 12 for individual schools to negotiate, threatening to publish the dataset otherwise. In response, Instructure disabled Free-for-Teacher accounts, rotated credentials, and engaged CrowdStrike for forensic analysis. The company also notified the FBI and CISA. This incident marks Instructure's second major breach in under a year, following a previous Salesforce-related intrusion in late 2025, highlighting ongoing cybersecurity challenges in the educational technology sector.

1 reports · 1 sources

Nvidia has confirmed a data breach affecting its GeForce NOW cloud gaming service, though the impact is strictly limited to users in Armenia. The incident resulted from a security compromise at GFN.am, a regional partner responsible for managing operations in several countries including Azerbaijan, Georgia, and Ukraine. Nvidia clarified that its own directly operated services remained unaffected by the attack. A threat actor, initially using the nickname ShinyHunters, attempted to sell millions of user records on an underground hacking forum for $100,000 in cryptocurrency. The exposed data reportedly includes names, email addresses, usernames, dates of birth, and two-factor authentication status, but crucially, no passwords were stolen. The actual ShinyHunters group later disavowed involvement, identifying the seller as an imposter. Nvidia is collaborating with GFN.am to support their investigation and resolution efforts, with the partner company tasked to notify impacted users. This event highlights the security risks associated with third-party infrastructure providers in global tech services, while reassuring the broader user base that their core accounts remain secure.

1 reports · 1 sources

The hacking collective ShinyHunters targeted Instructure's Canvas learning management system twice in recent weeks, causing significant disruptions during school finals. The initial breach on April 30 compromised data from 275 million users across nearly 9,000 schools, including usernames, email addresses, and private messages, though no passwords were stolen. A week later, the group launched a second attack by defacing school-specific login pages and threatening to release the stolen data unless a settlement was negotiated. Instructure identified the vulnerability in its Free-For-Teacher account environment and temporarily disabled this feature to conduct a security review. While the second incident did not result in further data theft, it caused widespread downtime, preventing students and educators from accessing assignments and exams. The timing proved particularly detrimental as many institutions were conducting end-of-year assessments. Public concern surged, with Google searches for Canvas-related issues spiking by approximately 1,000 percent. Several universities, including Seton Hall and Baylor University, acknowledged the disruption, with some postponing final exams to accommodate the technical failures. Instructure emphasized that securing the platform took precedence over immediate accessibility.

1 reports · 1 sources

The cybercrime gang ShinyHunters has claimed responsibility for a significant breach of Instructure’s Canvas learning management system, impacting approximately 9,000 educational institutions, including prestigious universities like Harvard and Georgetown. The attackers allegedly accessed sensitive student data, such as names, email addresses, identification numbers, and private messages, which they threaten to weaponize for fraud, identity theft, and extortion. Following the intrusion, hackers launched follow-on attacks defacing school login pages during final exam season, causing widespread disruption. Although Instructure has restored services and removed the victim list from the hackers' leak site, concerns remain regarding potential ransom negotiations. The FBI is investigating the incident, warning victims against paying ransoms or responding to unsolicited communications, noting that hackers often exaggerate their access. Experts highlight that higher education institutions are prime targets due to their vast data repositories and open networks. The primary long-term risk involves sophisticated phishing and social engineering scams rather than immediate financial theft. Consequently, students and educators are urged to enable multi-factor authentication and remain vigilant against suspicious messages. The House Homeland Security Committee has also launched an inquiry into the matter, underscoring the severity of cybersecurity vulnerabilities in the education sector.

1 reports · 1 sources

Instructure, the parent company of the educational platform Canvas, has issued an apology following a significant security breach that disrupted final exams at numerous universities. The attack, attributed to the hacking group ShinyHunters, exploited a vulnerability in the Free-for-Teacher support ticket system, potentially exposing data on tens of millions of students across nearly 9,000 schools. Exposed information includes usernames, email addresses, course details, and private messages. In response, Instructure temporarily suspended the Free-for-Teacher service and launched a dedicated incident update page. Despite assurances that the platform is now secure, the company faces at least 18 class-action lawsuits in the United States. Plaintiffs allege severe privacy violations, citing the exposure of sensitive educational records containing confidential communications regarding mental health, disabilities, and other personal matters. ShinyHunters initially claimed to have stolen data on 275 million individuals to extort a ransom. CEO Steve Daly acknowledged communication failures during the crisis and promised further forensic reports. This incident highlights ongoing cybersecurity risks in the education technology sector and the legal repercussions of failing to protect student data.

1 reports · 1 sources

Fashion retailer Zara, a flagship brand of the Inditex Group, confirmed that approximately 197,400 customer records were exposed in a significant data breach. The incident is linked to a broader cyberattack on Anodot, an AI-powered cloud analytics platform, by the ransomware group ShinyHunters. The attackers leaked 140GB of data from Zara’s BigQuery instances, which included email addresses, purchase histories, and support tickets. Despite the scale of the leak, Inditex stated that highly sensitive personal information, such as names, physical addresses, login credentials, and payment details, was not accessed or stolen. This distinction significantly reduces the immediate financial risk to affected customers. However, security experts warn that the combination of exposed emails and specific purchase details could facilitate sophisticated, tailored phishing campaigns targeting Zara shoppers. This breach highlights the cascading risks associated with third-party service integrations, as ShinyHunters exploited vulnerabilities in Anodot to access data from multiple companies connected to the platform. The event underscores the ongoing challenges in securing cloud-based supply chains and the persistent threat posed by organized cybercriminal groups targeting large retail ecosystems.

1 reports · 1 sources

NVIDIA has officially confirmed a data breach affecting users of its GeForce NOW cloud gaming service in Armenia. This confirmation follows earlier claims by a threat actor operating under the name ShinyHunters on a cybercrime forum, who alleged that millions of user records had been stolen. In its statement, NVIDIA clarified that its own core infrastructure was not compromised during this incident. Instead, the breach is attributed to a regional partner responsible for managing the service in Armenia. This distinction highlights that the security failure occurred within the partner's systems rather than NVIDIA's global network. The incident underscores the risks associated with third-party vendors and regional distributors in the technology sector. While NVIDIA's direct systems remained secure, the exposure of user data through a local partner raises significant concerns regarding data privacy and supply chain security for cloud gaming subscribers in the region. The company is likely working with the affected partner to mitigate the impact and inform affected users, although specific details on the number of affected accounts or the type of data exposed were not fully detailed in the initial summary.

1 reports · 1 sources