Back to Feed
Threat IntelligenceSep 21, 2026

ShinyHunters Hacked Clop. Now What About Clop's Victims?

ShinyHunters defaced Clop's dark web site and claims to have stolen victim data.

Summary

The threat actor group ShinyHunters has reportedly defaced the dark web site of the Clop ransomware group. In addition to the defacement, ShinyHunters claims to have exfiltrated victim data from Clop's infrastructure. This could potentially expose organizations that had previously paid ransoms to Clop, making them vulnerable to renewed extortion attempts.

Entities

ShinyHunters (threat_actor)Clop (threat_actor)