ThreatPaper

#unverified-claims

2 cases

ShinyHunters claims an FBI breach and defaces FBIjobs.gov — what's confirmed and what's only claimed

ShinyHunters claims it breached the FBI, defaced FBIjobs.gov, and stole ~2TB on almost all agents via a PeopleSoft zero-day. The defacement is observed and 404 Media matched a data sample to public records — but the FBI says the breach point is undetermined and most is unverified.

Data BreachExtortion & Blackmail
CenterPoint Energy breach: a confirmed intrusion, and a 7.49M-record claim only the attacker is making

CenterPoint's 8-K confirms a customer-data breach through an external-facing system — but the 7.49M figure, the SSN exposure, and the 'unprotected API' mechanism all come from the attacker's forum post, not the company. Filed under Item 8.01, deemed immaterial for now.

Data Breach