ShinyHunters Extortion Campaign Exposed Moody Data and Hit Oracle PeopleSoft Users

ShinyHunters publicly leaked data from Moody Bible Institute after a "pay or leak" extortion attempt, exposing more than 2.3 million unique email addresses along with names, physical addresses, phone numbers, dates of birth, and other personal details tied to donors, supporters, students, and alumni. Moody said it brought in internal and external cybersecurity specialists to investigate the breach and respond to the disclosure.

The same threat activity has also been linked to attacks on Oracle PeopleSoft deployments, with the National Association of Insurance Commissioners (NAIC) saying attackers exploited a zero-day flaw to gain temporary access to part of its IT environment and steal confidential financial reporting, credit rating agency, and technical data that was later published online. NAIC said the intrusion was part of a broader campaign affecting multiple organizations after ShinyHunters claimed compromises of more than 100 PeopleSoft installations worldwide; the organization said no personally identifiable information or payment account data was involved, remediated affected systems with outside experts, and said the FBI was investigating.