ShinyHunters has reportedly published sensitive data tied to around 40 major organizations, expanding a leak that includes well-known names such as Mytheresa, Zara, Carnival and 7-Eleven. According to reporting cited by TechRadar, the material appears to cover retailers, insurers and hospitality firms.

What the leak includes

The newly released data trove is said to contain millions of records and terabytes of internal information. One of the most notable examples mentioned in the report is Medtronic, which is linked to nine million compromised records.

• About 40 organizations were reportedly affected
• Victims span retail, insurance and hospitality sectors
• The leak is said to include millions of records
• Internal data reportedly totals terabytes
• Medtronic is linked to nine million records

ShinyHunters’ approach has changed

The report says the group has moved away from encryption and is now focused on data exfiltration. Rather than locking systems, the operators are described as prioritizing theft and publication of stolen data.

That shift is consistent with the group’s reported behavior in this case, where the information was allegedly made available on criminal platforms. The report also states that the stolen data will remain accessible indefinitely.

Organizations named in the leak

Among the organizations identified in the reporting are Mytheresa, Zara, Carnival and 7-Eleven. The leak is described as broad, with affected companies coming from multiple industries rather than a single sector.

The source does not say all affected organizations disclosed details publicly, but it notes that some companies did not pay the ransom demand.

Why the incident matters

Large-scale leaks like this can expose internal business information and create ongoing risk for affected organizations and their customers. In this case, the scale of the reported theft stands out as much as the number of companies involved.

For security teams, the incident is another reminder that data exfiltration campaigns can have lasting consequences even when ransomware encryption is no longer the primary tactic.

Bottom line: ShinyHunters is reportedly behind a major data leak affecting roughly 40 organizations, with the stolen information set to remain online indefinitely.