Last Update: 09/22/2026 at 11:34 PM EST

ShinyHunters Targets Enterprise Data Systems

Coverage from BleepingComputer, ComplexDiscovery, and others

ShinyHunters Targets Enterprise Data Systems topic image

ShinyHunters is linked in reporting to a series of data-theft and extortion incidents affecting Ernst & Young, Oracle PeopleSoft users, Odido, and the Council of Europe.

The activity includes exploitation of enterprise applications, compromise of third-party platforms, theft of sensitive personal and financial records, and threats to publish data through leak sites. Several attacker claims and the full scope of affected data remain unverified, while incident response, regulatory notifications, and vendor mitigations are ongoing.

Looking Back
158 Day Timeline
Feb 24Mar 24Apr 21Jun 2Jun 30Jul 28
History
08/05/2026

The update adds a new Council of Europe PeopleSoft-related incident, broadening the story beyond EY, Oracle customers, and Odido. It also shifts the framing toward ongoing response activity, with regulatory notifications and vendor mitigations now explicitly underway.

08/04/2026

The main update is stronger, more specific confirmation of separate incidents: EY now confirms unauthorized access and document downloads, Oracle has issued an emergency warning on actively exploited PeopleSoft flaws, and Odido has acknowledged large-scale customer data exposure. Attribution and full scope still remain partly unverified.

All Articles14 articles
Additional14 articles · CI Score below 45
BleepingComputer / Lawrence Abrams
7/27/2026 • Data Breaches & Exposure Events • General
ComplexDiscovery / Rob Robinson
7/31/2026 • Data Breaches & Exposure Events • General
CISO Platform / Pritha Aash
7/27/2026 • Data Breaches & Exposure Events • General
BleepingComputer / Lawrence Abrams
7/29/2026 • Cybersecurity (Privacy-Relevant) • General
SecurityWeek / Eduard Kovacs
6/12/2026 • Cybersecurity (Privacy-Relevant) • General
The Register / Jessica Lyons
6/15/2026 • Data Breaches & Exposure Events • General
Govtech
6/15/2026 • Data Breaches & Exposure Events • General
SecurityWeek / Ionut Arghire
7/29/2026 • Data Breaches & Exposure Events • General
Security Affairs / Pierluigi Paganini
7/29/2026 • Data Breaches & Exposure Events • General
HackRead
7/28/2026 • Data Breaches & Exposure Events • General
BleepingComputer / Lawrence Abrams
6/11/2026 • Data Breaches & Exposure Events • General
BleepingComputer / Lawrence Abrams
6/10/2026 • Cybersecurity Tech (Privacy-Relevant) • General
BleepingComputer / Sergiu Gatlan
2/24/2026 • Data Breaches & Exposure Events • General
Infosecurity Magazine
5/11/2026 • Data Breaches & Exposure Events • General