# ShinyHunters cybercriminal group activities

> Live situation record from CLSTR: https://clstr.news/situations/shinyhunters-cybercriminal-group-activities
> Updated: 2026-10-19T16:34:33.000Z. Sources: 5. Developments: 2.

A public feud erupted between the cybercriminal groups ShinyHunters and Clop in September 2026. The conflict intensified when ShinyHunters defaced Clop’s leak site by exploiting a flaw in the Grav content management system. The dispute reportedly involves a disagreement over a server-side request forgery vulnerability, with ShinyHunters claiming Clop used their exploit in attacks against Oracle’s E-Business Suite. During this period, ShinyHunters also claimed to have breached FBI systems, alleging possession of data on all FBI employees.

By October 2026, investigations shifted toward potential collusion between the hacking group and ransomware negotiation firms. Federal authorities are examining allegations that executives in the United States and Canada maintained close ties with ShinyHunters. Specifically, a US-based executive is suspected of helping operate a victim-extortion website that hosted pages for nearly 100 organizations. 

Following the arrest of Pepijn van der Stap in the Netherlands, investigators gained access to communications via Signal. This led to the arrest of Canadian cybersecurity executive Edward Dubrovsky in Pennsylvania on federal cyber extortion and conspiracy charges. Investigators suspect these negotiators may have received information regarding new ShinyHunters breaches before the targeted companies were notified of the compromises.

## Timeline

### 2026-10-19: US and Canadian ransomware negotiators suspected of ties to ShinyHunters

US and Canadian ransomware negotiators are under federal investigation for allegedly maintaining close ties with the ShinyHunters hacking group and assisting in extortion operations.

2 sources. https://clstr.news/cluster/us-and-canadian-ransomware-negotiators-suspected-of-ties-to-shinyhunters

### 2026-09-24: ShinyHunters and Clop cybercriminal groups engage in public feud

Cybercriminal groups ShinyHunters and Clop are engaged in a public feud involving site defacement and disputes over exploits, while ShinyHunters also claims to have breached FBI systems.

3 sources. https://clstr.news/cluster/shinyhunters-and-clop-cybercriminal-groups-engage-in-public-feud

---
Cite as: ShinyHunters cybercriminal group activities. CLSTR, https://clstr.news/situations/shinyhunters-cybercriminal-group-activities
