Checkout.com
Disclosed Nov 14, 2025Confirmed
ShinyHunters breach Checkout.com legacy cloud storage, firm refuses ransom
Checkout.com said ShinyHunters accessed a legacy third-party cloud storage system that was not properly decommissioned, holding merchant data from 2020 and earlier plus onboarding documents; it refused to pay and pledged to donate the ransom amount to security research.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Nov 14, 2025 |
| Attack | Extortion |
| Data exposed | Internal documentsOther |
| Sector | Finance · GB |
| Status | Confirmed |
Sources
Notices filed
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.