Ransomware Leak
shinyhunters
Ameriprise Financial, Inc.
Data leak attributed to shinyhunters, first discovered on 2026-03-22. Approximately 16,579,564 records were reported exposed.
Threat group
shinyhunters
Records exposed
16,579,564
Discovered
2026-03-22
Country
US
Indexed
2026-06-23
Source ID
27518
About this leak
Salesforce records containing PII and over 200GB compressed Sharepoint internal corporate data have been compromised. This is a final warning to reach out by 25 Mar 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 23 Mar 2026 | Warning: FINAL WARNING
What is inside this leak sample
Indexed records
16,579,564
With email
•••
ID documents
•••
File types
•••
Corporate vs personal email
95.97% corporate · 4.03% personal
Top corporate email domains
% of corporate emails
ampf.com
87.14%
columbiathreadneedle.com
7.66%
6 more hidden ·
Enterprise
Analysed 2026-09-02
More leaks attributed to shinyhunters
Worried your information is in this or another leak?
Run a free, anonymous search
across millions of ransomware and stealer log records.