--- title: ShinyHunters data leaks fuel $2,000 sextortion email scam description: Threat actors are exploiting email addresses from data breaches previously leaked by the ShinyHunters extortion group to run a sextortion campaign. Victims... canonical: https://daily.dev/posts/shinyhunters-data-leaks-fuel-2-000-sextortion-email-scam-qfhoovvla twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: ShinyHunters data leaks fuel $2,000 sextortion email scam | daily.dev og:description: Threat actors are exploiting email addresses from data breaches previously leaked by the ShinyHunters extortion group to run a sextortion campaign. Victims... og:url: https://daily.dev/posts/shinyhunters-data-leaks-fuel-2-000-sextortion-email-scam-qfhoovvla og:image: https://api.daily.dev/og/posts/qfHOovvLa.png og:image:alt: ShinyHunters data leaks fuel $2,000 sextortion email scam og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # ShinyHunters data leaks fuel $2,000 sextortion email scam **[BleepingComputer](https://daily.dev/sources/bleepingcomputer)** · 5 min read · 0 upvotes · 1 comments ## Summary Threat actors are exploiting email addresses from data breaches previously leaked by the ShinyHunters extortion group to run a sextortion campaign. Victims receive emails falsely claiming ShinyHunters compromised their devices, recorded them visiting adult websites, and will share the footage unless $2,000 in Bitcoin is paid within 48 hours. The campaign, active since April, references real breaches (Amtrak, Betterment, CarGurus, and others) to appear credible, but there is no evidence any devices were actually compromised. ShinyHunters denied involvement. Recipients are advised not to pay, respond, or click any links. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Community discussion Top comments from developers on daily.dev. **@trevorsuna** · 0 upvotes > Using real breach names is what makes this scam feel believable. Clear incident emails should tell users exactly what was and wasn’t exposed, so a leaked address doesn’t turn into panic and a $2,000 payment. ## Similar posts on daily.dev - [ShinyHunters Wage Broad Corporate Extortion Spree – Krebs on Security](https://daily.dev/posts/shinyhunters-wage-broad-corporate-extortion-spree-krebs-on-security-w8mqeq1jg) · Krebs on Security · 1 upvotes · 0 comments - [ShinyHunters demands $1.5M not to leak Wynn Resorts data](https://daily.dev/posts/shinyhunters-demands-1-5m-not-to-leak-wynn-resorts-data-dkxehpzll) · The Register · 0 upvotes · 0 comments - [Charter Communications data breach affects 4.9 million accounts](https://daily.dev/posts/charter-communications-data-breach-affects-4-9-million-accounts-tqaixxttl) · BleepingComputer · 0 upvotes · 0 comments --- Tags: [#bitcoin](https://daily.dev/tags/bitcoin), [#data-breach](https://daily.dev/tags/data-breach), [#phishing](https://daily.dev/tags/phishing) [View this post on daily.dev](https://daily.dev/posts/shinyhunters-data-leaks-fuel-2-000-sextortion-email-scam-qfhoovvla) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"ShinyHunters data leaks fuel $2,000 sextortion email scam","url":"https://daily.dev/posts/shinyhunters-data-leaks-fuel-2-000-sextortion-email-scam-qfhoovvla","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/shinyhunters-data-leaks-fuel-2-000-sextortion-email-scam-qfhoovvla"},"datePublished":"2026-07-25T14:20:47.824Z","dateModified":"2026-07-30T02:12:41.153Z","description":"Threat actors are exploiting email addresses from data breaches previously leaked by the ShinyHunters extortion group to run a sextortion campaign. Victims...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/c75f953fed76fb29c3a7c1e1f000e796?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/c75f953fed76fb29c3a7c1e1f000e796?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"BleepingComputer","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"BleepingComputer","logo":"https://media.daily.dev/image/upload/s--as8nJ3qy--/f_auto,q_auto/v1774959951/logos/bleepingcomputer?_a=BAMAMiWQ0","url":"https://daily.dev/sources/bleepingcomputer"},"commentCount":1,"discussionUrl":"https://daily.dev/posts/shinyhunters-data-leaks-fuel-2-000-sextortion-email-scam-qfhoovvla","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":1}],"keywords":"bitcoin,data-breach,phishing","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"BleepingComputer","item":"https://daily.dev/sources/bleepingcomputer"},{"@type":"ListItem","position":3,"name":"ShinyHunters data leaks fuel $2,000 sextortion email scam"}]} {"@context":"https://schema.org","@type":"WebPage","@id":"https://daily.dev/posts/shinyhunters-data-leaks-fuel-2-000-sextortion-email-scam-qfhoovvla","comment":[{"@type":"Comment","text":"Using real breach names is what makes this scam feel believable. Clear incident emails should tell users exactly what was and wasn’t exposed, so a leaked address doesn’t turn into panic and a $2,000 payment.","datePublished":"2026-07-25T15:02:36.980Z","url":"https://daily.dev/posts/qfHOovvLa#c-AIlP4lW4I","author":{"@type":"Person","name":"Trevor Suna","url":"https://daily.dev/trevorsuna","image":"https://media.daily.dev/image/upload/s--dZ7gXxpp--/f_auto/v1784081551/avatars/avatar_EMoP47rpuw8DNjhp6R1b6?_a=BAMAMicg0"}}]} ```