ShinyHunters Claims Data Breaches at O’Reilly and Dexcom

The data extortion group ShinyHunters has publicly claimed responsibility for alleged data breaches affecting O’Reilly, an automotive parts retailer, and Dexcom, a medical device company specialising in continuous glucose monitoring.

Both organisations were reportedly listed on ShinyHunters’ new leak site, a platform typically used by cybercrime groups to publicise stolen data and exert pressure on victims.

ShinyHunters is a well-known cybercrime syndicate with a history of carrying out data breaches and subsequently selling or leaking exfiltrated information. The group emerged in 2020 and has been responsible for numerous high-profile incidents involving the compromise of corporate networks and theft of sensitive data.

At the time of reporting, neither O’Reilly nor Dexcom had publicly confirmed the alleged breaches. The specific nature of the data claimed to have been exfiltrated, or the extent of any potential compromise, remains unverified.

Companies appearing on a leak site generally indicates that the threat actor claims to have gained unauthorised access to systems and exfiltrated data. Such listings often precede the public release of stolen information if a ransom is not paid.