ShinyHunters Extorted Boeing Spin-off Prior to Arrests – Krebs on Security

A Jordanian teenager known online as "Rey," allegedly the current leader of the data-theft and extortion gang ShinyHunters, has been detained and is reportedly cooperating with the FBI to expose other members. At the time of his arrest he was in the middle of extorting Jeppesen ForeFlight, an aviation-software unit that Boeing sold off to Thoma Bravo last year, and both companies have confirmed the extortion attempt while saying operations were not impacted. Rey previously claimed credit for breaching the FBI and the Cl0p ransomware group by exploiting CVE-2026-35273, a flaw in Oracle's PeopleSoft platform that ShinyHunters began abusing as a zero-day in June and that researchers at Mandiant and Google's Threat Intelligence Group say was used to mass-harvest data from dozens of organizations. The case highlights how ShinyHunters has effectively become a franchised brand run by shifting, loosely affiliated operators rather than its original founders.```