ShinyHunters claims 2 Million Crunchbase records; company confirms breach
好的,我现在需要帮用户总结一篇文章的内容,控制在100个字以内。用户的要求是直接写文章描述,不需要用“文章内容总结”之类的开头。 首先,我看看文章的主要内容。Crunchbase确认了数据泄露事件,ShinyHunters声称窃取了超过200万条记录。这个犯罪团伙泄露了一个402MB的压缩档案,因为勒索未遂。Crunchbase表示运营没有受到影响,已经控制住了事件,并通知了联邦当局,正在调查中。 接下来,我需要提取关键信息:Crunchbase数据泄露、ShinyHunters窃取200万记录、泄露档案、勒索失败、公司应对措施。 然后,我要把这些信息浓缩成一句话,不超过100字。确保包含主要事件和结果。 最后,检查是否符合用户的要求:直接描述,不使用特定开头,控制字数。 </think> Crunchbase确认数据泄露事件,ShinyHunters声称窃取超200万条记录并泄露402MB档案。公司称运营未受影响,已控制事件并通知当局调查中。 2026-1-26 15:17:54 Author: securityaffairs.com(查看原文) 阅读量:0 收藏

ShinyHunters claims 2 Million Crunchbase records; company confirms breach

Crunchbase confirms a data breach after cybercrime group ShinyHunters claims to have stolen over 2 million personal records.

Crunchbase confirmed a data breach after the cybercriminal group ShinyHunters claimed to steal over 2 million personal records from its systems.

The group leaked a 402 MB compressed archive on their website due to a failed extortion attempt.

The company states that operations weren’t affected and that the security breach is now contained. Crunchbase notified federal authorities and is investigating the incident with the help of external experts. The company is reviewing the exposed data to determine if any legal notifications are needed.

“Crunchbase detected a cybersecurity incident where a threat actor exfiltrated certain documents from our corporate network. No business operations have been disrupted by this incident. We have contained the incident and our systems are secure,” Crunchbase told SecurityWeek

“Upon detecting the incident we engaged cybersecurity experts to assist us and we contacted federal law enforcement. Crunchbase is aware that the threat actor posted certain information online. As part of our incident response procedures we are reviewing the impacted information to determine if any notifications are required consistent with applicable legal requirements,”.

The ShinyHunters group recently resumed its Tor data leak site listing breaches at SoundCloud, Betterment, and Crunchbase. Both companies had previously confirmed data breaches.

ShinyHunters is a financially motivated cybercrime group active since 2020. It steals large volumes of personal and corporate data from major companies, then sells or leaks it on underground forums if ransom demands aren’t met. The group uses compromised credentials, cloud services, and social engineering, claiming responsibility for breaches of millions of records from platforms like Tokopedia and other high-profile targets.

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, ShinyHunters)




文章来源: https://securityaffairs.com/187340/data-breach/shinyhunters-claims-2-million-crunchbase-records-company-confirms-breach.html
如有侵权请联系:admin#unsafe.sh