Questel Hit by ShinyHunters Extortion Campaign, Exposing 1.2M Records
In a recent cyberattack, intellectual property management firm Questel was targeted by the ShinyHunters hacking group last month as part of an extortion campaign. The threat actors subsequently leaked data allegedly belonging to the company, exposing 1.2 million records containing sensitive personal information.
The compromised data includes emails, full names, employers, job titles, physical addresses, and phone numbers. Analysis revealed that 51% of the exposed records were already publicly available on LinkedIn, suggesting partial overlap with professional networking data. However, the breach still poses risks due to the aggregation of personal and corporate details.
ShinyHunters, a well-known cybercriminal collective, has previously been linked to high-profile data breaches and extortion schemes. The group typically steals data before demanding ransom payments, often leaking it publicly if demands are not met. This incident underscores the ongoing threat posed by organized cybercrime groups targeting corporate and intellectual property data.
The full scope of the breach’s impact remains under assessment, but the exposure of such a large dataset raises concerns about potential phishing attacks, identity theft, and corporate espionage. Organizations and individuals affected may face heightened risks of targeted social engineering campaigns leveraging the leaked information.
Source: https://www.linkedin.com/feed/update/urn:li:activity:7500416549229481985
Questel cybersecurity rating report: https://www.rankiteo.com/company/questel
"id": "QUE1788240299",
"linkid": "questel",
"type": "Breach",
"date": "8/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '1.2 million records exposed',
'industry': 'Intellectual Property, Legal Services',
'name': 'Questel',
'type': 'Intellectual Property Management Firm'}],
'data_breach': {'data_exfiltration': 'Yes',
'number_of_records_exposed': '1.2 million',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High (Personal and Corporate Details)',
'type_of_data_compromised': ['Emails',
'Full names',
'Employers',
'Job titles',
'Physical addresses',
'Phone numbers']},
'description': 'In a recent cyberattack, intellectual property management '
'firm Questel was targeted by the ShinyHunters hacking group '
'as part of an extortion campaign. The threat actors leaked '
'data allegedly belonging to the company, exposing 1.2 million '
'records containing sensitive personal information. The '
'compromised data includes emails, full names, employers, job '
'titles, physical addresses, and phone numbers. Analysis '
'revealed that 51% of the exposed records were already '
'publicly available on LinkedIn, but the breach still poses '
'risks due to the aggregation of personal and corporate '
'details.',
'impact': {'brand_reputation_impact': 'Heightened risk of phishing, identity '
'theft, and corporate espionage',
'data_compromised': '1.2 million records',
'identity_theft_risk': 'High'},
'investigation_status': 'Under assessment',
'motivation': 'Extortion, Financial Gain',
'ransomware': {'data_exfiltration': 'Yes'},
'references': [{'source': 'Cyber Incident Description'}],
'threat_actor': 'ShinyHunters',
'title': 'Questel Hit by ShinyHunters Extortion Campaign, Exposing 1.2M '
'Records',
'type': 'Data Breach, Extortion'}