ShinyHunters claims massive Woflow breach

Cybernews reports that AI-powered merchant data platform Woflow, whose clients include Walmart, Uber, and DoorDash, had hundreds of millions of corporate and customer data allegedly compromised by the ShinyHunters cyber extortion group.

ShinyHunters, which threatened to leak the data on March 6 if its demands are not met, claimed to have stolen Woflow information such as internal corporate data, personally identifiable information, and transaction and order details. The group has not provided a data sample, which could be used to verify the claim. Woflow has also not responded to requests for comment at the time of reporting. ShinyHunters was previously linked to a breach of the Dutch telecom company Odido, where millions of records were leaked over several days and a potential attack on the French crypto tax platform Waltio.

"As far as we can see, ShinyHunters mostly target big names or companies that partner with known businesses. They bank on victims fearing for their reputation, which supposedly increases pressure to pay the ransom due to regulatory or reputational risks," according to Cybernews researchers.