ShinyHunters Publishes Stolen Data From Bumble, Match Group, and Dozens of Firms

ShinyHunters has published a broad trove of allegedly stolen data affecting more than 40 organizations across retail, healthcare, hospitality, insurance, and consumer services, with reporting tying the leak campaign to victims including Bumble, Match Group, Mytheresa, Zara, Carnival, and 7-Eleven. Researchers said the exposed material includes personally identifiable information, customer and transaction records, internal corporate files, and multi-terabyte datasets; one of the largest alleged exposures involved Medtronic, where roughly 9 million records were reportedly listed before that entry was later removed from the leak site.

The campaign reflects ShinyHunters' continued shift from ransomware-style encryption to data theft and extortion, with the group allegedly threatening to keep victim data available indefinitely on criminal platforms. Separate reports said the actors claimed to have stolen about 10 million records from dating-app companies, while researchers also linked leaked Bumble data to the same operation after an earlier claim that roughly 30GB had been taken from the company. The disclosures echo a wider criminal pattern in which stolen sensitive data is leaked to pressure victims after exfiltration, including in healthcare breaches such as the Change Healthcare incident.