Home / Crime and Justice / Hackers Demand $1.55M for Stolen Wynn Employee Data
Hackers Demand $1.55M for Stolen Wynn Employee Data
23 Feb
Summary
- ShinyHunters claims breach of Wynn Resorts, leaking employee data.
- Hackers demand 23.34 Bitcoin, about $1.55 million, for deletion.
- Data breach allegedly exploited an Oracle PeopleSoft vulnerability.
Wynn Resorts is allegedly the latest victim of the notorious ransomware group ShinyHunters, which claims to have exfiltrated over 800,000 employee records. The group has set a deadline of February 23, 2026, for Wynn Resorts to pay a ransom of 23.34 Bitcoin, equating to roughly $1.55 million, to prevent the data's release. Researchers analyzing a sample of the leaked data reported it includes full names, emails, phone numbers, salaries, and birth dates.
ShinyHunters stated that the intrusion was facilitated by an Oracle PeopleSoft vulnerability, accessed using compromised employee credentials in September 2025. This access to personal employee information could enable highly convincing phishing attacks and other forms of fraud. Wynn Resorts has not yet issued an official statement regarding the alleged breach or responded to media inquiries about the incident.
