5.1 million ZenBusiness customer records hit a public data-breach index in mid-April. The dump reportedly includes names, emails, phones, and Social Security numbers from people who used the platform to form an LLC. ShinyHunters claimed responsibility on March 26th, demanded a ransom, and went public after non-payment. The group claims the data came out of three SaaS platforms ZenBusiness uses — Salesforce, Snowflake, and Mixpanel. Per Google's threat researchers, the group's documented technique against Salesforce isn't a software exploit but a vishing call: operators pose as IT and walk an employee through authorizing what looks like a routine connected app, then bulk-export the customer database. Whether that's how ZenBusiness was hit specifically, neither side has said. ZenBusiness has not, as of recording, publicly acknowledged the breach. Class-action attorneys are advertising for plaintiffs. Sources: https://haveibeenpwned.com/Breach/ZenBusiness https://cybernews.com/security/zenbusiness-shinyhunters-data-breach-mark-cuban/ https://www.classaction.org/data-breach-lawsuits/zenbusiness-march-2026 https://www.breachsense.com/breaches/zenbusiness-data-breach/ https://appomni.com/blog/detecting-unc6040-vishing-in-salesforce-oauth-attacks/ More on cybersecurity, privacy, scams, and homelab on Hake Hardware. New shorts every weekday. #cybersecurity #databreach #shinyhunters

New VS Code Zero-Day Steals GitHub Tokens in One Click
1.5K views

Microsoft Backs Down on Threats Against Zero-Day Researcher
6.4K views

CIFSwitch Linux Kernel Bug: Any Logged-In User Gets Root
2.3K views

BusPatrol Wants 40,000 School Buses to Be Police Plate Trackers
4.2K views

How the Mirai Trio Avoided Prison (Part 6 of 6)
1.7K views

How the FBI Tracked Down the Mirai Trio (Part 5 of 6)
1.6K views