RANSOMWARE VICTIM

PRESS STATEMENT

shinyhunters📅 May 8, 2026
1
linked CVEs
8
same group

Attack Intelligence

PRESS STATEMENT was compromised in a ransomware attack attributed to shinyhunters in May 2026. The organization, operating in an undisclosed sector in Unknown, was added to the group's data leak site as part of an extortion campaign.

shinyhunters operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Due to the significant amount of press inquries we are receiving every hour from all around the world, we are making a public statement. We are not commenting and have no further comment to make regarding this global incident.

Intelligence correlations link this incident to 1 vulnerability(ies) including CVE-2026-35273, which may have been leveraged as initial access vectors or for lateral movement.

Correlated Vulnerabilities (1)

Other Victims — shinyhunters (8)

Quick Facts

Attack DateMay 8, 2026
Intel Sourceransomlook

Threat Group

shinyhunters
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.