x.comthreadHave I Been Pwned (@haveibeenpwned) on X
Have I Been Pwned post announcing the Sharecare breach, tied to an August ShinyHunters extortion campaign. It allegedly exposed 318k email addresses, mostly business contacts, plus some Brazilian health plan member data. 73% of the addresses were already in HIBP. This adds another health-sector victim to the ShinyHunters extortion record. The business contact data is likely to be reused for phishing.
TL;DR HIBP adds the Sharecare breach: 318k emails from an August ShinyHunters extortion campaign, 73% already in HIBP.
Organisations named here
- Sharecare
Technologies named here
- Sharecare
- Have I Been Pwned
Techniques named here
- Extortion campaign, attributed to ShinyHunters
- Phishing using recycled business contact lists
Threat actors named here
- ShinyHunters
Related in Threat Intel
huntress.comwriteupReverse Engineering the Six Stages of MacSync Stealer and RAT
huntress.comwriteupAI-Coded Malware | Analyzing Vibe-Coded AD Enumeration | Huntress
blog.talosintelligence.comtoolIntroducing CAIRN: Frontier tracking for AI-integrated malware (Cisco Talos)
huntress.comwriteup