Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
2026-10-21T01:23:22Z•69bd5fb73bb868761ef00a13453181ff40a82b053f51d32002838c89e679ef78
FBIMicrosoft patchingShinyHunterscryptocurrency launderingcybercrimedark webdata brokersdata theftdriver's licensesextortionidentity theftlaw enforcementransomwareransomware negotiationsanctionstelecommunications breachvulnerability management
What happened
KrebsOnSecurity reporting from September–October 2026 covers major cybercrime investigations and enforcement actions involving ShinyHunters, alleged collusion by ransomware negotiation firms, large-scale data theft and extortion, illicit cryptocurrency payment services, and the sale of more than 153 million driver's-license scans. It also highlights Microsoft’s unusually large security updates covering more than 1,400 vulnerabilities in October and nearly 1,000 in September. No specific CVE identifiers are provided in the supplied feed.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 69bd5fb73bb868761ef00a13453181ff40a82b053f51d32002838c89e679ef78
- Enrichment time
- 2026-10-21T01:23:22Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.