Threat Intelligence Brief
Curated summary with source attribution
Source: haveibeenpwned.com
Threat Risk: Medium
Victim: Questel
Incident: A data breach and extortion campaign resulting in the leak of 1.2 million records.
Impact: Exposure of corporate contact information including emails, names, employers, and phone numbers.
Attacker: ShinyHunters
Analysis: ShinyHunters targeted Questel using a ‘pay or leak’ strategy, ultimately publishing data after the company likely refused payment. The leaked dataset contains professional contact details for 1.2 million individuals, which significantly increases the risk of targeted phishing and social engineering campaigns. This incident underscores the persistent threat of data extortion targeting software and professional services firms.
Recommendations: Enable multi-factor authentication (MFA) across all corporate accounts.; Alert employees to be vigilant against highly targeted phishing emails using leaked professional details.; Implement a password management policy to ensure unique, strong credentials for every service.
Source: Have I Been Pwned
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source
Latest Developments
Update — 2026-09-01 13:37 UTC
An extortion-driven data breach resulting in the leak of over 1.2 million records. Exposure of sensitive corporate contact information and support history, enabling targeted identity theft and phishing. The threat actor ShinyHunters targeted Questel using a ‘pay or leak’ extortion strategy. The resulting data dump contains extensive corporate contact information and support ticket details. This exposure significantly increases the risk of highly targeted social engineering and spear-phishing campaigns against Questel’s global client base.
Corroborating source: hookphish.com