shinyhunters ransomware group lists coe.int on its leak site

• Ransomware group: shinyhunters
• Country: France
• Sector: Government & Defense
• Announcement date: June 14, 2026

Shinyhunters claims a major data breach against the Council of Europe

The ransomware group known as shinyhunters has posted an announcement on their leak site claiming a data breach against the Council of Europe (coe.int). According to the group's claims, a wide range of sensitive information has been collected from the organization. This announcement, which was reportedly updated on June 14, 2026, suggests that the group has targeted the institution's internal data, specifically focusing on human resources and payroll information.

The group has threatened to leak the collected data if their demands are not met. While the specific ransom demand has not been disclosed in the available information, the group has reportedly set a deadline of June 16, 2026, for the resolution of their demands. The claim suggests that the breach may have occurred around June 13, 2026.

Details of the claimed data theft

The scale of the alleged theft is significant, with the group claiming to have acquired over 429,000 files. The total volume of the data involved is estimated by the attackers to be approximately 297 GB. Although no screenshots have been provided to verify the contents of the stolen data, the group claims that the breach includes a vast array of sensitive personal and professional information.

The specific types of data the group claims to have compromised include:

• Payslips
• CVs
• Personnel files
• Bank account details
• Tax and social security information
• Medical and absence records
• Contact information (names, addresses, phone numbers, dates of birth)

In the context of modern cyber threats, this type of attack often follows the model of double extortion. In such scenarios, threat actors do not merely encrypt an organization's systems to disrupt operations; they also exfiltrate sensitive data to use as leverage. By threatening to release private information publicly, attackers aim to increase the pressure on the victim to pay a ransom, often using the threat of reputational damage or legal consequences as motivation.

About the Council of Europe

The Council of Europe is the continent's leading human rights organization, aiming to uphold human rights, democracy, and the rule of law. Based in Strasbourg, France, the organization works to foster cooperation among its member states.

Potential risks and organizational implications

The alleged breach poses various risks to the institution's employees and its operational processes. The nature of the data involved—which includes highly sensitive medical records, bank details, and tax information—could potentially facilitate identity theft and targeted phishing attacks against the individuals involved. Such attacks often use stolen personal details to craft highly convincing fraudulent communications designed to trick victims into revealing even more sensitive information or transferring funds.

Given the scope and sensitivity of the data, the institution may face significant legal obligations under GDPR (EU) regulations. Data protection frameworks like the General Data Protection Regulation require organizations to implement strict security measures and report breaches that could result in risks to the rights and freedoms of natural persons. Failure to comply with these regulations can lead to substantial legal and financial consequences.

Beyond the immediate privacy concerns, secondary risks such as supply chain vulnerabilities might arise from such a breach. If the stolen data contains information regarding partners or interconnected systems, it could create new avenues for attackers to move through different networks. Furthermore, the situation could potentially impact the institution's reputation and its overall operational security. For organizations in the government and defense sector, maintaining the integrity of personnel data is critical to ensuring the security of the institution's mission and the trust of its member states.