Shinyhunters Breach Cl0p Gang, Demand Massive Ransom Payment

WHO:

The Record - ShinyHunters, a cybercrime group, and Cl0p, a ransomware gang.

WHAT:

The Record - ShinyHunters hijacked the dark web site of Cl0p and set an eight-figure extortion demand.

The Record - The extortion amount was described as "2.333%" of Cl0p's net worth.

TechRadar - Cl0p's website was defaced and its data was stolen during the attack.

WHERE:

The Record - The incident occurred on the dark web, specifically targeting Cl0p's leak site.

WHEN:

The Record - The material regarding the hijacking was posted over the weekend.

WHY:

The Record - ShinyHunters' motivations include extorting Cl0p for a ransom payment.

HOW:

The Record - ShinyHunters executed a hijacking of Cl0p's dark web site.

(UPDATED September 21, 2026 17:03 UTC)

In a significant cyber incident, the group ShinyHunters has hijacked the dark web site of the ransomware gang Cl0p, demanding an extortion amount described as "2.333%" of Cl0p's net worth. The attack not only defaced Cl0p's website but also resulted in the theft of sensitive data, with the material about the hijacking surfacing over the weekend. ShinyHunters appears motivated by the desire to extort Cl0p for a substantial ransom payment.