


So that's why I don't believe Shiny is a new player to this market."Ĭhatbooks put out a similar statement last week. Nobody just drops into the scene with all this stuff. "I always find that as an immediate flag.

"What’s interesting about this is how this group appeared out of nowhere and had all this new data for sale," says Vinny Troia, CEO of the IT security firm Night Lion Security who has been tracking ShinyHunters. But while ShinyHunters came on strong in early May, dropping trove after trove of freshly stolen data, the group now seems to have gone quiet. Without new breaches, user details that are already in circulation-like account login credentials, names, addresses, phone numbers, and credit card data-simply get repackaged again and again and passed around criminal forums at lower cost. Such binges aren't unprecedented in the dark web stolen data economy, but they're a crucial driver of identity theft and fraud. Over the first two weeks of May, a hacking group called ShinyHunters has been on a rampage, hawking what it claims is close to 200 million stolen records from at least 13 companies. Some of these assaults are the result of sophisticated nation-state espionage operations, while others are fueled by online criminals hoping to sell the stolen data. Data breaches have become an all too common threat in recent years, exposing personal information through attacks on companies and institutions.
