Apr 21, 2026, 06:45 PM
Hello Breachforums Community.
Today we, sell to you all the Salesforce information worldwide that uses it, Connect with Salesforce, Everything related to Salesforce.
I hope Salesforce doesn't pay anything to the Copycats behind the Onion Blog and Website shinyhunte.rs.
Actually that's not us, We are the legit ShinyHunters, from 2023, Together with Aegis, the former administrator of Breachforums, we really hate people who misuse our name for their personal interests, using our name to Fraudsters, blackmailing companies, and gaining other benefits such as cooperation and so on.
I want to advise and announce to all of you, don't trust Mattys Savoie who is behind the website [ shinyhunte.rs ] We have published this person's personal information, he is one of the people who impersonated us, using our name to become a Ransomware group, Mattys Savoie Been abusing my PGP Keys, Just before Trihash/Hollow was arrested, he made a deal with his French friend Mattys Savoie by giving him the SH PGP key.
Why? To create the fake Telegram group, keep talking publicly, cause as much chaos as possible, and try to clear Trihash/Hollow's name.
But Mattys’s plan went so far: to continue ransomware attacks and launch his own forum (breachstars.io) to get the same notoriety as BreachForums and recruit a new team of hackers.
This plan was against what Raphaël believed in — Mattys just abused of ShinyHunters PGP key.
Salesforce, Wemix… and others.
it was him, alone without any other guy "unc1201,unc154" all are his other accounts.
Including: UNC3944 - UNC6040 - UNC6395- UNC6240
Any message signed with the PGP key “SHINY HUNTERS” is Mattys Savoie. No need to look elsewhere.
What we’re holding against him:
He never stopped pretending to be someone else — notably on a Telegram channel claiming to be Scattered LAPSUS$ Hunters, when it was all a fraud it was just "mattys savoie".
- Salesforce – Customer data leak and attempted extortion against the company.
- Millicom – Extortion attempt against the telecommunications company.
- Wemix – Theft of tokens through a compromised GitHub repository.
How can we prove that we are genuine, while the Unknown (ShinyHunters) who holds the main PGP key has been captured, and so they think it is me, but The one who was arrested was not me, but a member of my own group.
- IntelBroker ( Hellcat ) - ShinyHunters
- Noct - ShinyHunters
- Hollow - ShinyHunters
And other.
I told a long story here, to tell the world, every time I tell the truth, Mattys Savoie, always denies our accusations are false, actually Mattys is Playing you all, including the stupid companies that pay him
We ShinyHunters are not a Ransomware group, but since this guy has misused our name, we have no choice but to play along and we will definitely make him suffer.
We have provided a French Assassin to kill him for $5,000,000 USD
Hopefully Mattys realizes what he did, before Death takes him.
Proof that we are truly legitimate, and we have access to all the Salesforce databases on the planet.
Including, Source code, Internal server information, Connections related to Salesforce,User access Super admin access, and many more things that have not been revealed.
I can guarantee that Mattys will continue to do their way by posting data that has been stolen from our servers, and he is trying to get money by asking for ransom, threatening Company, and also he tries to act like me, every thing I say he will deny it.
I have what you don't have, I'm not a Ransomware group, I'm the real ShinyHunters
PGP Message
WHAT EVIDENCE WE HAVE IS STORED HERE:
https://ibb.co.com/C5CxgrLm
Today we, sell to you all the Salesforce information worldwide that uses it, Connect with Salesforce, Everything related to Salesforce.
I hope Salesforce doesn't pay anything to the Copycats behind the Onion Blog and Website shinyhunte.rs.
Actually that's not us, We are the legit ShinyHunters, from 2023, Together with Aegis, the former administrator of Breachforums, we really hate people who misuse our name for their personal interests, using our name to Fraudsters, blackmailing companies, and gaining other benefits such as cooperation and so on.
I want to advise and announce to all of you, don't trust Mattys Savoie who is behind the website [ shinyhunte.rs ] We have published this person's personal information, he is one of the people who impersonated us, using our name to become a Ransomware group, Mattys Savoie Been abusing my PGP Keys, Just before Trihash/Hollow was arrested, he made a deal with his French friend Mattys Savoie by giving him the SH PGP key.
Why? To create the fake Telegram group, keep talking publicly, cause as much chaos as possible, and try to clear Trihash/Hollow's name.
But Mattys’s plan went so far: to continue ransomware attacks and launch his own forum (breachstars.io) to get the same notoriety as BreachForums and recruit a new team of hackers.
This plan was against what Raphaël believed in — Mattys just abused of ShinyHunters PGP key.
Salesforce, Wemix… and others.
it was him, alone without any other guy "unc1201,unc154" all are his other accounts.
Including: UNC3944 - UNC6040 - UNC6395- UNC6240
Any message signed with the PGP key “SHINY HUNTERS” is Mattys Savoie. No need to look elsewhere.
What we’re holding against him:
He never stopped pretending to be someone else — notably on a Telegram channel claiming to be Scattered LAPSUS$ Hunters, when it was all a fraud it was just "mattys savoie".
- Salesforce – Customer data leak and attempted extortion against the company.
- Millicom – Extortion attempt against the telecommunications company.
- Wemix – Theft of tokens through a compromised GitHub repository.
How can we prove that we are genuine, while the Unknown (ShinyHunters) who holds the main PGP key has been captured, and so they think it is me, but The one who was arrested was not me, but a member of my own group.
- IntelBroker ( Hellcat ) - ShinyHunters
- Noct - ShinyHunters
- Hollow - ShinyHunters
And other.
I told a long story here, to tell the world, every time I tell the truth, Mattys Savoie, always denies our accusations are false, actually Mattys is Playing you all, including the stupid companies that pay him
We ShinyHunters are not a Ransomware group, but since this guy has misused our name, we have no choice but to play along and we will definitely make him suffer.
We have provided a French Assassin to kill him for $5,000,000 USD
Hopefully Mattys realizes what he did, before Death takes him.
Proof that we are truly legitimate, and we have access to all the Salesforce databases on the planet.
Including, Source code, Internal server information, Connections related to Salesforce,User access Super admin access, and many more things that have not been revealed.
I can guarantee that Mattys will continue to do their way by posting data that has been stolen from our servers, and he is trying to get money by asking for ransom, threatening Company, and also he tries to act like me, every thing I say he will deny it.
I have what you don't have, I'm not a Ransomware group, I'm the real ShinyHunters
PGP Message
-----BEGIN PGP MESSAGE-----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=abAM
-----END PGP MESSAGE-----WHAT EVIDENCE WE HAVE IS STORED HERE:
https://ibb.co.com/C5CxgrLm
New PGP Key ShinyHunters Signature 20 Apr 2026
Sessions ID:
0510837c665c8b923d81fb3413658ea9fa893fa57ad185da91a0ceb5e4f5eeb58
Sessions ID:
0510837c665c8b923d81fb3413658ea9fa893fa57ad185da91a0ceb5e4f5eeb58