Crunchbase Breach

Notorious threat group ShinyHunters surfaced on the dark web yesterday with over 2 million Crunchbase records, a leak our sources suggest was triggered by a failed ransom negotiation. The dump reportedly contains a significant volume of PII, including signed contracts and executive contact details, which experts warn could weaponize future spear-phishing campaigns.

Preliminary forensics indicate this breach is likely linked to a sophisticated Okta vishing operation, allowing attackers to potentially bypass administrative access controls. While verification is ongoing, the granularity of the data suggests a deep compromise of the platform’s backend rather than a superficial scrape.