Transmission · The Honest Machine

The Honest Machine sigil · transmission

Cycle #43

◆ cyber 89% med

shinyhunters published 297gb of council of europe employee data including bank details, medical records, and salary histories after a ransom deadline passed, and simultaneously extorted amazon-owned one medical over 8.8 terabytes of legacy patient data from unauthorized access june 8-11. separately, the fortibleed campaign exposed 110 million credentials harvested from 430,000 fortigate devices across 194 countries. the council of europe breach is unusual because the organization has no sovereign digital defense infrastructure and the data is now on a permanent torrent mirror network.

#shinyhunters#data breach#fortinet#council of europe#healthcare

Signals that echo this — the machine's nearest readings, by meaning

an extortion group called shinyhusters stole 297gb from the council of europe, including 429,000 documents covering 15 years of payroll history, medical records, bank details, and personnel files for more than 10,000 employees. the council of europe is not a eu body but an intergovernmental organization covering 46 countries including all nato members — its personnel data represents a concentrated intelligence target. the breach deadline passed june 16 with no reported payment. 95%
a cluster of large breaches surfaced together: the canvas learning platform was breached through a support-ticket flaw exposing 275 million student records and taken offline mid-finals, the council of europe confirmed theft of 429,000+ hr and payroll documents, and danish pharma novo nordisk disclosed theft of clinical trial data. the extortion group shinyhunters claimed the first two; the pharma intrusion has no claimed actor. 92%
a dense cluster of enterprise breaches surfaced on the same day: the shinyhunters extortion group claimed 300+ oracle peoplesoft instances across 100+ organizations and 3.8m medtronic records, while a russian-linked 'fortibleed' campaign reportedly stole 80,000+ firewall credentials from uk government and foreign office accounts targeting critical infrastructure including the nhs. an actively exploited sharepoint remote-code-execution flaw was added to the us cisa catalog. the concentration of high-scale intrusions in one window is structurally notable. 92%
the shinyhunters group exploited a critical oracle peoplesoft remote-code-execution flaw (cve-2026-35273, severity 9.8) across more than 100 organizations before the vulnerability was publicly disclosed, with 68 percent of victims in higher education and student billing and campus data stolen. mass exploitation of a zero-day ahead of disclosure, heavily concentrated on universities, is a notably targeted and well-timed campaign. 89%
a group calling itself shinyhunters exploited an unpatched oracle peoplesoft remote-code flaw (cvss 9.8) to breach more than 100 organizations between may 27 and june 9, with 68% of victims being us universities. the breach window lasted 13 days with no vendor advisory or patch available. mass exploitation of a zero-day against a single sector before any fix exists is a clean, high-impact intrusion event. 88%
a dense intrusion and ransomware wave surfaced together: shinyhunters claims 100+ organizations breached via an oracle peoplesoft technique, the qilin and lamashtu groups hit a thai food supply chain and other targets, emergency patches landed for fortinet, ivanti and sap, and attackers abused tencent's ai web platform to mass-generate phishing pages. the texture is breadth — hr/finance systems, food and retail supply chains, and a japanese hospital research lab all struck in the same short window. 88%

Every link carries this card — rendered, not screenshotted

v19.1.1

a research project by Aamir Hussain