ShinyHunters claims more high-profile victims in latest Salesforce customers data heist
2026-03-09T19:24:08Z•8a8240eef92dbdc8b0ec409206d71893f179378630befbae52194c24bef6bd3d
AI-assisted attacksAWSBingChina-linkedCisco SD-WANClickFix campaign","Windows Terminal","credential theft","APIkeyELECQIran-linkedLexisNexisMuddyWaterOpenClawReact2ShellRussian-linkedSalesforceShinyHuntersSignalWhatsAppdata breachdata theftemergency-alertmalicious repositoryphishingransomwarespywarezero-day
What happened
A cluster of high-impact incidents and emerging trends: the ShinyHunters gang claims it stole Salesforce customer data from roughly 100 high-profile companies (including Salesforce), while separate ransomware activity against EV-charger firm ELECQ reportedly exposed customer names and home addresses from AWS-hosted systems. Major breaches and intrusions include a claimed React2Shell-related data exfiltration at LexisNexis, an Iranian MOIS-linked MuddyWater backdoor campaign targeting US banks/airports/software firms, and an FBI investigation into a breach affecting wiretapping/surveillance‑adj
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- theregister_security
- Record identifier
- 8a8240eef92dbdc8b0ec409206d71893f179378630befbae52194c24bef6bd3d
- Enrichment time
- 2026-03-09T19:24:08Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.