ShinyHunters claims Okta customer breaches, leaks data • The Register
ShinyHunters claims Okta customer breaches, leaks data • The Register
https://www.theregister.com/2026/01/23/shinyhunters_claims_okta_customer_breaches/
Publish Date: 2026-01-23 13:46:00
Source Domain: www.theregister.com
ShinyHunters has claimed responsibility for an Okta voice-phishing campaign during which the extortionist crew allegedly gained access to Crunchbase and Betterment.
On Friday, the criminals leaked data allegedly stolen from market-intel broker Crunchbase, streaming platform SoundCloud, and financial-tech firm Betterment, and confirmed to The Register that they gained access to two of the three – Crunchbase and Betterment – by voice-phishing Okta single-sign-on codes.
SoundCloud in December confirmed it had been breached and the crooks accessed data belonging to about 20 percent of its users, which translates to about 28 million people, based on the company’s publicly available customer count.
When asked about ShinyHunters’ claims, a SoundCloud spokesperson told us that the streaming platform is “aware that a threat actor group has published data online allegedly taken from our organization,” and directed users to a January 13 blog update for more information. “Please know that our security team – supported by leading third-party cybersecurity experts – is actively reviewing the claim and published data,” the spokesperson said.
ShinyHunters wouldn’t say how they accessed SoundCloud’s data, but added that it wasn’t through the streaming platform’s Okta credentials. They also claimed to have broken into “a lot more” companies in the Okta campaign than the two they leaked on Friday, but declined to say how many more or name any of the alleged victims.
According to the group’s Friday blog post, the Betterment and Crunchbase data dumps contain more than 20 million and 2 million records respectively, while the SoundCloud leak totals more than 30 million records, all with personally identifiable information (PII).
Neither Crunchbase nor Betterment immediately responded to The Register’s inquiries. We will update this…
