Adelante Soluciones Financieras (Addi.com) targeted by shinyhunters ransomware group

• Ransomware group: shinyhunters
• Country: Colombia
• Sector: Financial Services
• Announcement date: May 5, 2026

Shinyhunters claims data leak from Adelante Soluciones Financieras

The ransomware group known as shinyhunters has claimed responsibility for a significant data breach involving Adelante Soluciones Financieras (Addi.com). According to an announcement made on a leak site, the group alleges that they have leaked over 518GB of data belonging to the Colombian financial technology firm. This announcement, which was posted on May 5, 2026, suggests a failed attempt at extortion, as the group claims the data was released following a breakdown in negotiations.

In many modern ransomware attacks, threat actors employ a tactic known as double extortion. In this scenario, attackers do not merely encrypt an organization's systems to disrupt operations; they also exfiltrate sensitive information before the encryption occurs. The goal is to pressure the victim into paying a ransom by threatening to release the stolen data publicly. If the victim refuses to pay or fails to reach an agreement, the attackers move to the leak phase, where they post the stolen data on dedicated leak sites to maximize public pressure and reputational damage.

Details of the alleged incident

The shinyhunters group has provided specific details regarding the circumstances surrounding the leak. They claim that the company failed to reach an agreement with them despite the group making multiple offers. The group's narrative suggests a lack of cooperation from the organization, which ultimately led to the decision to list the stolen data on a public leak site. The group further stated that the leaked data was updated on May 5, 2026, the same day they claimed the attack occurred.

While the group has made these claims, it is important to note that no screenshots were provided in the announcement to verify the contents of the breach. Furthermore, no specific ransom demand was mentioned in the source material, and the exact number of files involved remains unknown. The group's public profile and history remain limited, making it difficult to gather broader intelligence on their specific tactics, techniques, and procedures.

Potential data exposure and affected information

The scale of the alleged breach is substantial, with the group claiming the theft of over 518GB of information. According to the records, the leaked data may involve highly sensitive information belonging to more than 16 million unique individuals. The information potentially exposed includes a wide range of critical data points, such as:

• Personally Identifiable Information (PII)
• Financial transaction data
• Credit card information
• KYC (Know Your Customer) data
• Background check data from TransUnion and Experian

The inclusion of background check data from major providers like TransUnion and Experian suggests that the breach could impact the integrity of identity verification processes. When such a vast amount of sensitive data is compromised, the implications for the individuals involved are significant.

Organization profile

Addi, operating as Adelante Soluciones Financieras, is a financial technology company headquartered in Colombia. The company specializes in providing digital payment solutions and shopping credit to consumers, primarily utilizing a 'buy now, pay later' (BNPL) business model.

Risks and organizational implications

The nature of the data allegedly leaked poses various risks to both the financial institution and the millions of individuals potentially affected. The exposure of financial transaction details and KYC information creates a high risk for identity theft and the execution of targeted phishing attacks. When attackers possess detailed personal and financial profiles, they can craft highly convincing social engineering campaigns to defraud victims.

For the organization, such a breach can lead to significant legal implications regarding data protection regulations and compliance. Beyond the legal landscape, the company may face severe reputational damage and the threat of secondary cyberattacks. In the financial services sector, maintaining trust is paramount, and the exposure of sensitive customer data can undermine that foundation.

To mitigate such risks, organizations in the financial sector typically focus on robust defensive measures. These include implementing strong multi-factor authentication (MFA), maintaining rigorous encryption standards for data at rest and in transit, and conducting regular security audits. Furthermore, continuous monitoring of network traffic and employee training on phishing awareness are essential components of a modern cybersecurity posture designed to prevent exfiltration and detect unauthorized access early in the attack lifecycle.