Pathstone Family Office, LLC listed on shinyhunters leak site

• Ransomware group: shinyhunters
• Country: United States
• Sector: Financial Services
• Announcement date: February 27, 2026

Shinyhunters claims breach of Pathstone Family Office, LLC

The threat actor group known as shinyhunters has listed Pathstone Family Office, LLC on their dedicated leak site. According to the announcement made on February 27, 2026, the group claims that a significant volume of data has been compromised. Specifically, the attackers claim to have obtained over 641,000 records belonging to the organization.

This incident follows a pattern often seen in modern cyberattacks where threat actors target high-value entities to maximize leverage. In this instance, the group has issued a deadline to the organization. They have stated that if Pathstone Family Office, LLC does not establish contact by March 2, 2026, the stolen data may be fully released to the public.

Details of the claimed data theft

While the announcement confirms the presence of sensitive information, the group has not provided any screenshots to verify the contents of the stolen files. The listing specifically mentions that the compromised data includes both personally identifiable information (PII) and internal corporate data. No information was provided regarding the specific size of the data or the exact nature of the files.

The types of data mentioned in the claim include:

• Personally identifiable information (PII)
• Internal corporate data

The use of such data is a hallmark of double extortion tactics. In these scenarios, attackers do not just encrypt an organization's systems to disrupt operations; they also steal sensitive information to use as leverage. By threatening to leak private data, the group attempts to exert maximum pressure on the victim to meet their demands.

About Pathstone Family Office, LLC

Pathstone is an independent wealth management firm. The organization provides a variety of specialized services, including investment management, financial planning, and family office services. Their client base consists of high-net-worth individuals, families, and foundations.

Potential impact and industry implications

This incident may pose significant secondary risks for the organization's clients and employees, such as identity theft and fraud. Because the data is claimed to include personally identifiable information, the individuals involved may face targeted social engineering or financial crimes.

Given that Pathstone operates within the financial services sector, the alleged leak could lead to serious regulatory consequences. Organizations in this sector are subject to strict compliance standards, such as the Gramm-Leach-Bliley Act (GLBA), which governs the protection of consumer financial information. A breach of this nature often triggers mandatory reporting requirements and rigorous audits by regulatory bodies.

Furthermore, the incident may negatively impact the organization's reputation and raise serious concerns regarding their data protection protocols. For firms managing the wealth of high-net-worth individuals, maintaining client trust is paramount, and a public data leak can damage that trust significantly.

While information regarding the shinyhunters group remains limited, their actions highlight the ongoing threat posed by ransomware-as-a-service models. Organizations in the financial sector can mitigate such risks by implementing robust security frameworks, such as multi-factor authentication, end-to-end encryption for sensitive data, and continuous monitoring of network traffic. Additionally, maintaining a comprehensive incident response plan and ensuring regular backups are essential components of a modern defensive posture against extortion-based attacks.