CFGI Management Breach

On March 9, 2026, CFGI Management, LLC, a prominent financial consulting and business advisory firm, was identified as a victim of a significant data breach. The incident resulted in the unauthorized exfiltration of corporate data from the firm’s systems, which was subsequently posted to a dark web leak site.

The threat actor group known as ShinyHunters has claimed responsibility for the intrusion. This group is part of a broader collective often tracked by security researchers as UNC6661 or Scattered Lapsus Hunters, which has been active in a large-scale campaign throughout early 2026 targeting high-profile organizations through identity-based attacks.