ShinyHunters Extortion Attack Exposes 200K Aman Records in Data Leak This week, the luxury hospitality group Aman fell victim to a "pay or leak" extortion scheme orchestrated by the cybercriminal group ShinyHunters, resulting in the public release of over 200,000 email addresses and sensitive customer data. The leaked information included names, physical addresses, phone numbers, nationalities, and VIP statuses, exposing high-profile guests to potential identity theft and targeted attacks. According to analysis, 74% of the compromised email addresses were already indexed on LinkedIn, increasing the risk of phishing and social engineering campaigns. The breach highlights the growing trend of double-extortion tactics, where threat actors not only encrypt data but also threaten to publish it unless a ransom is paid. The incident underscores the persistent threat posed by financially motivated cybercriminals to high-value targets in the hospitality sector, where customer privacy is a critical concern. No details on whether Aman complied with the extortion demand have been disclosed.