The ShinyHunters extortion group has added 3 new organizations to its leak site, claiming to have compromised and stolen corporate data belonging to DeltaQuest.com, Charter Communications, Inc., and Baker Distributing Company.
DeltaQuest operates customer engagement and data management services, Charter Communications is one of the largest telecommunications and internet providers in the United States under the Spectrum brand, and Baker Distributing Company is a major HVAC, refrigeration, and foodservice equipment distributor.
The listings appeared on May 22 and follow a recent wave of high-profile extortion activity tied to the group. Each entry contains short descriptions threatening to publicly leak allegedly stolen data if the companies fail to respond before a stated deadline of May 27, 2026.
According to the posts, the threat actor claims Charter Communications suffered the largest alleged exposure, with more than 42 million records reportedly compromised. The listing for Baker Distributing Company alleges over 260,000 Salesforce records containing PII and internal corporate information were stolen.
The DeltaQuest listing did not disclose a record count but included a message suggesting sensitive internal data had allegedly been accessed during the intrusion.
No sample data or technical evidence was publicly released alongside the listings at time of publication.
ShinyHunters continues aggressive extortion activity
The latest claims continue a sustained period of activity from ShinyHunters, which has repeatedly targeted major corporations, SaaS platforms, telecommunications providers, and cloud-based services in recent years.
The group frequently uses extortion-based tactics involving alleged data theft and public leak threats rather than ransomware encryption.
At time of publication, none of the 3 organizations had issued public statements confirming the alleged breaches.
BreachNews will continue monitoring for company responses, regulatory disclosures, or additional evidence supporting the claims.
