Executive Summary

ShinyHunters, an extortion gang, breached the Clop ransomware operation's data leak site, defacing the Tor site and allegedly stealing server data and private keys for its onion service. The attack began Friday night when ShinyHunters exploited an unauthenticated file upload vulnerability in Grav CMS.

---

Intelligence Metadata - Source Publisher: DataBreaches.net - Published Date: 2026-09-19T14:04:50+00:00 - Category: data-breaches

Original Description: Lawrence Abrams reports: The ShinyHunters extortion gang breached the Clop (aka Cl0p) ransomware operation’s data leak site, defacing the Tor site and allegedly stealing server data and the private keys for its onion service. The attack began Friday night when ShinyHunters exploited what they claim is an unauthenticated file upload vulnerability in Grav CMS, which... Source

"Without this playing with fantasy no creative work has ever yet come to birth. The debt we owe to the play of the imagination is incalculable."

— Carl Jung