ShinyHunters ransomware group lists glendale.edu on its leak site

• Ransomware group: ShinyHunters
• Country: United States
• Sector: Education
• Announcement date: June 15, 2026

The ShinyHunters ransomware group has announced a major data breach involving Glendale Community College. According to a post on a leak site on June 15, 2026, the threat actor claims to have exfiltrated 62 GB of data belonging to the educational institution. The group alleges that the breach occurred on June 15, 2026, and has threatened to release the entirety of the stolen information if certain conditions are not met.

The details of the alleged attack

The ShinyHunters group claims to have compromised a massive volume of information from the glendale.edu domain. Specifically, the threat actor alleges that they have gained access to over 304,000 files. This breach reportedly includes more than 150,000 student records alongside various administrative documents used by the institution.

In a move characteristic of modern cyber extortion, the group has issued a deadline to the organization. They have stated that all the stolen data will be leaked publicly if a ransom is not paid by June 18, 2026. While the specific ransom demand has not been disclosed, the group is utilizing a double extortion tactic. This method involves not only encrypting an organization's systems to disrupt operations but also stealing sensitive data to use as leverage, threatening to publish it to force payment.

The scope of the alleged data theft

The information claimed to be stolen by ShinyHunters covers a wide range of sensitive personal and institutional data. The breach allegedly includes various file types and datasets that could expose the private lives of students and the administrative functions of the college. No screenshots were provided by the group to verify the contents of the stolen files.

The alleged leaked data includes the following items:

• Student names
• Dates of birth
• Email addresses
• Financial aid data
• Transcripts
• Immunization records
• Login and enrollment mapping files
• New student enrollment CSVs
• Admission checklist reports

About Glendale Community College

Glendale Community College is a public community college located in Glendale, California, United States. It offers associate degrees, vocational certificate programs, and university transfer education.

Implications and risks for the education sector

This alleged leak poses significant risks to the individuals involved and the institution itself. For students, the exposure of names, dates of birth, and email addresses significantly increases the risk of identity theft and targeted phishing attacks. Such attacks often leverage personal details to gain further access to accounts or to conduct financial fraud.

From a regulatory perspective, attacks on educational institutions can lead to severe legal consequences. Because the breach involves the exposure of sensitive personal information, it may fall under the jurisdiction of the Family Educational Rights and Privacy Act (FERPA) and various state-level data protection regulations in the United States. Furthermore, the compromise of data related to financial aid and admission processes could negatively impact the operational continuity of the college and cause lasting damage to its institutional reputation.

In the broader context of cybersecurity, organizations in the education sector often face these types of threats due to the high volume of sensitive personal and financial data they manage. To defend against such threats, organizations typically implement multi-layered security strategies. This includes robust data encryption, strict access controls to limit the exposure of sensitive files, and continuous monitoring of network traffic to detect unauthorized data exfiltration. Additionally, maintaining regular, offline backups is a common defensive step to ensure operational continuity in the event of a ransomware attack.