Talk:ShinyHunters

Semi-protected edit request on 8 May 2026

I think shinyhunters was an openly lgbtq+ group. I saw this earlier on the wiki. ~2026-27816-13 (talk) 02:45, 8 May 2026 (UTC)

 Not done: please provide reliable sources that support the change you want made. I wasn't able to find an edit before the current flurry of activity that includes this info. Umby 🌕🐶 (talk) 03:04, 8 May 2026 (UTC)

Yes, an editor removed that line from the first sentence of the page last Thursday (5/7/26). ~2026-28683-24 (talk) 15:48, 12 May 2026 (UTC)

Source for countries affected by Canvas outage

There are many more countries that were affected by the outage. I understand that this is a pointless observation if I can't attribute it to a source, but this press release from PUC Minas, a university in Brazil, not only mentions that the university itself was affected (therefore confirming that Brazil was among the affected countries) but also mentions that "the [outage] affects all of [Instructure's] clients worldwide."

The notice page that went up when they hacked Canvas included a list of affected schools/universities/school districts, which includes many more countries than both this article and 2026 Canvas security incident, though I'm not sure whether this could be used as a source either, seeing as the original text file is no longer up and remains only as reuploads on cybersecurity websites. Kalio2048 (talk) 03:32, 14 May 2026 (UTC)

Website

This is probably not the right place to ask this question, but if people are aware of the website, then why is it not being taken down? It contains personal info that should not be made available to others. I am fairly certain this is illegal. 🍁EFOSERVETY🍁 11:28, 16 May 2026 (UTC)

We are not the legal team. If WP:OVERSIGHT or WP:LEGAL want to take it down they can do that. Otherwise wikipedia is WP:NOTCENSORED Czarking0 (talk) 01:36, 18 May 2026 (UTC)

I would assume that they use Bulletproof hosting to place data where it will not easily be subject to legal takedown requests. David Malone (talk) 08:49, 18 May 2026 (UTC)

Article structure

I would like to hear the opinion of fellow editors here.

I don't like how this article is structured at all. It contains 3 different ways of formatting the breaches: single column bulleted list per year with explanation, sections per type and an "other" section with just names and numbers.

I would suggest the following: a single table with the full list of breaches, and a section that discusses their tactics, techniques and procedures. PhotographyEdits (talk) 10:00, 7 August 2026 (UTC)

I agree that the three formats should be merged and the tactics separated into another section. I'd be a bit worried about a table growing to violate WP:NOTDB, but it should be fine as long as reliable sources are used. Using a table would also make it easier to split the info into a separate list subarticle if required in the future. ElToAn123 (talk) 15:33, 7 August 2026 (UTC)

Semi-protected edit request on 23 September 2026

Change "breaching multiple FBI-related services and extorted data from 4,000 employees" to "breaching multiple FBI-related services containing sensitive employee and applicant data. The hack publicly defaced the official FBI application portal to showcase the official ShinyHunters logo. The group referred to the attack as 'coercion' that is 'not financially motivated'."

The groups statement in 404 media defines it 'not something I’d call extortion, maybe coercion' making the current description innacurate. Additionally, the hack of the application portal is a major part of the hack. Glarrainv (talk) 02:27, 23 September 2026 (UTC)

Partly done: Mostly implemented, changed the wording a little Czarking0 (talk) 04:23, 23 September 2026 (UTC)

@Czarking0 It looks great! Thank you Glarrainv (talk) 04:40, 23 September 2026 (UTC)

Evergrowing victim list

I'd like to suggest the following editing to the victim list of SH for this year. I had already made an edit, but it got removed.

McKesson: In September 2026, ShinyHunters released hundreds of millions of records/rows of data containing very sensitive information including individuals' first and last name, address, phone number, email, patient IDs, date of birth and social security numbers, health insurance, medical and billing information.

Kimberly-Clark

Medela.com

[partial] Florida DMV leak

Valqk (talk) 17:41, 23 September 2026 (UTC)

Florida DMV leak

The Florida Department of Highway Safety and Motor Vehicles suffered a major data breach on September 4, 2026, after cybercriminals accessed the Driver and Vehicle Information Database using compromised law enforcement credentials. Although the breach has been contained and an ongoing criminal investigation is underway, the extortion group ShinyHunters claims to have stolen over 200,000 records containing sensitive personal information. While the Florida Department of Highway Safety and Motor Vehicles maintains that the entry point was solely a police officer's improperly stored login credentials, the cybercriminal group ShinyHunters claims they actually exploited a password-reset flaw within the DAVID platform. They allege this vulnerability allowed them to take over multiple administrative and employee accounts, including one belonging to an FBI agent. Masonwhogames63 (talk) 20:13, 23 September 2026 (UTC)