CYBERSECURITYTRACKER
Permanent story citation

Risky Bulletin: ShinyHunters suspects arrested in US and Jordan

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 9970

As cited

Copy frozen at (site build).

breaches incidents

Risky Bulletin: ShinyHunters suspects arrested in US and Jordan

ShinyHunters members were arrested in the US and Jordan following a series of high-profile breaches. The group hijacked country-code top-level domain registries for American Samoa, Ghana, and Sierra Leone to obtain fraudulent HTTPS certificates and targeted Google and other organizations. After ShinyHunters breached Accenture's Oracle PeopleSoft systems and compromised personal and business data of nearly all FBI special agents, the FBI terminated Accenture's contractor status due to the company's failure to apply security patches.

Why it matters: FBI and law enforcement personnel, Accenture customers, and organizations relying on Google services should verify whether their data or systems were exposed in the ShinyHunters breach; federal agencies and enterprises must audit patch management processes to prevent similar supply chain compromises.

VendorsGoogleOracle
Actorsshinyhunters
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary