2026 Addi - alleged ShinyHunters breach exposing 16M fintech records
Data compromised
Alleged personal information, including data associated with TransUnion and Experian
Technical writeup
VenariX posted on X on May 5, 2026 that Colombian fintech Addi experienced a March 2026 cyberattack and that ShinyHunters claimed responsibility, allegedly exposing 16 million records of personal information including data from TransUnion and Experian. No direct company confirmation was found in the indexed sources reviewed, so this record is tracked as alleged.
Root cause
Alleged ShinyHunters breach of fintech data; technical vector not confirmed