ShinyHunters breached 140+ organisations and took $70M+ in extortion
Assessment
The figures of 'more than 140 organizations' breached and 'at least $70 million' in extortion payments since 2025 originate with the FBI and are widely repeated as fact. They describe alleged, unadjudicated conduct across ShinyHunters' entire operation, not the Jeppesen ForeFlight incident, and no public breakdown shows how the organisation count or the dollar figure was derived or what they count. They are the bureau's own assessment of scale rather than an independently established total, and should be attributed to the FBI rather than stated flatly.
Where this claim appeared
The Hacker News · 2026-10-04
https://thehackernews.com/2026/10/shinyhunters-suspect-rey-reportedly.htmlWhat “Assessed, Not Confirmed” means
A named source states this as its own assessment, at its own stated confidence, rather than as established fact. Attribution to a nation state usually sits here. The assessment is real and reportable; treating it as settled is the error.
4 of 5 · rating scale
Assessed in
Jeppesen ForeFlight extortion: ShinyHunters hits Boeing-divested aviation unit as FBI arrests mountThink this assessment is wrong? Report an error.