#4
Dark Reading
general
September 21, 2026 at 20:07 UTC
ShinyHunters Hacked Clop. Now What About Clop's Victims?
By Alexander Culafi
AI Summary
Threat actor ShinyHunters defaced the dark web leak site of Cl0p ransomware gang and claims to have exfiltrated Cl0p's victim data, which could expose organizations that previously paid ransoms to a second wave of extortion. The incident represents an unusual case of cybercriminal-on-cybercriminal breach, and security teams at organizations previously victimized by Cl0p should anticipate renewed contact from threat actors wielding this stolen data. The full scope of what ShinyHunters obtained from Cl0p's infrastructure remains unclear.
Relevance score: 88.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →