Talk:ShinyHunters

Article structure

I would like to hear the opinion of fellow editors here.

I don't like how this article is structured at all. It contains 3 different ways of formatting the breaches: single column bulleted list per year with explanation, sections per type and an "other" section with just names and numbers.

I would suggest the following: a single table with the full list of breaches, and a section that discusses their tactics, techniques and procedures. PhotographyEdits (talk) 10:00, 7 August 2026 (UTC)

I agree that the three formats should be merged and the tactics separated into another section. I'd be a bit worried about a table growing to violate WP:NOTDB, but it should be fine as long as reliable sources are used. Using a table would also make it easier to split the info into a separate list subarticle if required in the future. ElToAn123 (talk) 15:33, 7 August 2026 (UTC)

Semi-protected edit request on 23 September 2026

Change "breaching multiple FBI-related services and extorted data from 4,000 employees" to "breaching multiple FBI-related services containing sensitive employee and applicant data. The hack publicly defaced the official FBI application portal to showcase the official ShinyHunters logo. The group referred to the attack as 'coercion' that is 'not financially motivated'."

The groups statement in 404 media defines it 'not something I’d call extortion, maybe coercion' making the current description innacurate. Additionally, the hack of the application portal is a major part of the hack. Glarrainv (talk) 02:27, 23 September 2026 (UTC)

Partly done: Mostly implemented, changed the wording a little Czarking0 (talk) 04:23, 23 September 2026 (UTC)

@Czarking0 It looks great! Thank you Glarrainv (talk) 04:40, 23 September 2026 (UTC)

References

Evergrowing victim list

I'd like to suggest the following editing to the victim list of SH for this year. I had already made an edit, but it got removed.

McKesson: In September 2026, ShinyHunters released hundreds of millions of records/rows of data containing very sensitive information including individuals' first and last name, address, phone number, email, patient IDs, date of birth and social security numbers, health insurance, medical and billing information.

Kimberly-Clark

Medela.com

[partial] Florida DMV leak

Valqk (talk) 17:41, 23 September 2026 (UTC)

Florida DMV leak

The Florida Department of Highway Safety and Motor Vehicles suffered a major data breach on September 4, 2026, after cybercriminals accessed the Driver and Vehicle Information Database using compromised law enforcement credentials. Although the breach has been contained and an ongoing criminal investigation is underway, the extortion group ShinyHunters claims to have stolen over 200,000 records containing sensitive personal information. While the Florida Department of Highway Safety and Motor Vehicles maintains that the entry point was solely a police officer's improperly stored login credentials, the cybercriminal group ShinyHunters claims they actually exploited a password-reset flaw within the DAVID platform. They allege this vulnerability allowed them to take over multiple administrative and employee accounts, including one belonging to an FBI agent. Masonwhogames63 (talk) 20:13, 23 September 2026 (UTC)