CFGI Hit by ShinyHunters Extortion Campaign, Exposing 243K Corporate Emails In March, global consulting firm CFGI fell victim to an extortion campaign by the cybercriminal group ShinyHunters, resulting in the leak of 243,000 unique email addresses alongside names and corporate contact details. The exposed data, which included both current and former employees, was later published online, amplifying the breach’s impact. Analysis revealed that 53% of the compromised email addresses were already indexed on LinkedIn, increasing the risk of targeted phishing or credential-stuffing attacks. The incident highlights the growing threat of extortion-based breaches, where attackers not only steal data but also publicly release it to pressure victims into paying ransoms. The breach underscores the persistent vulnerabilities in corporate data protection, particularly as threat actors like ShinyHunters continue to exploit weak security measures to extract and monetize sensitive information. No further details on the attack vector or CFGI’s response have been disclosed.