ShinyHunters

The twitter profile of the group maintains a shiny Pokémon profile picture indicating that the ShinyHunters name is potentially derived from the game of the same name. Within the game, Shiny Pokémon exist and players spend hours hunting for them. This clue may lend credence to the threat group's motivation: hunting for shiny or rare artifact's, which appear to be user data. [3][4]

The following are other hacks that have credited or alleged to have been done by ShinyHunters and their estimated impacts of numbers of user records affected.[21][22][23]

• JusPay - 100 million user records[24]
• Zoosk - 30 million user records[25]
• Chatbooks -15 million user records[26]
• SocialShare - 6 million user records[27]
• Home Chef - 8 million user records[28]
• Minted - 5 million user records[29]
• Chronicle of Higher Education - 3 million user records[30]
• GuMim - 2 million user records[31]
• Mindful - 2 million user records[32]
• Bhinneka - 1.2 million user records[33]
• StarTribune - 1 million user records[34]
• Dave.com- 7.5 million users[35]
• Drizly.com - 2.4 million user records[36]
• Havenly - 1.3 million user records[37]
• Hurb.com - 20 million user records[38]
• Indabamusic - 475,000 user records[39]
• Ivoy.mx - 127,000 user records[40]
• Mathway - 25.8 million user records[41]
• Proctoru - 444,000 user records[42]
• Promo - 22 million user records[43]
• Rewards1- 3 million user records[44]
• Scentbird - 5.8 million user records[45]
• Swvl - 4 million user records[46]
• Glofox - Unknown[47]
• Truefire - 602,000 user records[48]
• Vakinha - 4.8 million user records[49]
• Appen.com - 5.8 million user records[50]
• Styleshare - 6 million user records[51]
• Bhinneka - 1.2 million user records[52]
• Unacademy - 22 million user records[53][54]
• BuyuCoin - 325,000 user records[55]
• Wishbone - 40 million user records[56]

In August 2020, ShinyHunters hacked Hack Forums with a defacement message, using a Pokemon image and music. [57]

ShinyHunters group is under investigation from the FBI as well as Indonesian and Indian police for the Tokopedia breach. Tokopedia CEO & Founder statement also confirmed this claim on Twitter. [58][59]

Minted company has informed the US federal law enforcement authorities and the investigation is still in its early stages.[60]

Wishbone Administrative document from california district in wishbone (class action lawsuit). [61]

Stacey from AnimalJam company stated that they are preparing a report for the FBI Cyber Task Force and notifying all affected emails. They have also created a 'Data Breach Alert' on their site to answer questions related to this breach. [62]

BigBasket has filed an First Information Report (FIR) on November 6, 2020, with the cyber cell of the Bengaluru Police to investigate the incident. [63]

Dave company also initiated an investigation, which is ongoing, and is coordinating with law enforcement, including the FBI. [64]

Wattpad also stated that they reported the incident to law enforcement and engaged third-party security experts to assist them in investigation. [65]

Some journalists and security researchers believe ShinyHunters might be linked to the previously known GnosticPlayers or his known associate "NSFW". However, ShinyHunters have directly denied it. In addition to questions around ties to other actors, researchers have also stated that they are unsure if ShinyHunters is a collective of multiple people, or one person working alone. [66][67]

ShinyHunters has listed some databases under the name @fs0c131y with link to Elliot Alderson’s Twitter account aka the french security researcher, Robert Baptiste. The group is believed to share some sort of link or grudge with the researcher. [68]