Major U.S. data center operator CyrusOne is reportedly facing a $13 million extortion demand from the ShinyHunters cybercrime group, which claims to have stolen a massive collection of sensitive corporate data.
The hackers posted the allegations on their dark web leak site, claiming CyrusOne had refused to meet the $13 million demand. ShinyHunters also alleged that it obtained approximately 12.9 million Salesforce records and hundreds of gigabytes of SharePoint data.
According to the group’s claims, the compromised information includes more than 8,300 employee records containing personally identifiable information, contracts, non-disclosure agreements, security policies, access-control records, badge audits, physical key inventories, password lists and other credential-related information.
More concerning are claims that data center floor plans, electrical diagrams and critical infrastructure documentation were also stolen. If authentic, such information could potentially expose sensitive details about the physical and operational security of CyrusOne facilities.
However, the alleged breach remains unverified. CyrusOne had not publicly confirmed the incident at the time of the report, and ShinyHunters had not released data samples providing independent proof of its claims.