ShinyHunters Claims Massive Data Breach at Council of Europe, Threatens Leak by 16 June The cybercrime group ShinyHunters has asserted responsibility for a significant breach targeting the Council of Europe, threatening to release 297GB of allegedly stolen data unless its demands are met by 16 June 2026. The group claims the exfiltrated dataset includes 429,000 files, spanning records from 2011 to 2026, with potential exposure for over 10,000 current and former employees, contractors, and job applicants. According to posts on the group’s dark web "pay-or-leak" portal, the compromised data encompasses HR, payroll, and financial records from multiple Council of Europe entities, including the Secretariat, Human Resources Directorate, Parliamentary Assembly, EDQM, and payroll administration. The stolen files reportedly contain 409,000 payslips, 14,000 CVs, and 3,700 internal HR documents, alongside salary details, bank account information, tax records, social security data, and personal identifiers such as names, addresses, and contact details. Cybersecurity experts warn that if the claims are verified, the exposed data could fuel phishing attacks, identity theft, financial fraud, and social engineering campaigns. The breach may impact permanent and temporary staff, HR personnel, interpreters, institutional partners, and job applicants. While ShinyHunters has provided detailed assertions, the full scope and authenticity of the breach remain unconfirmed, with no independent verification of the data’s volume or sensitivity. As the 16 June deadline approaches, the incident has heightened concerns across European institutions regarding the potential fallout from a large-scale data leak.