Threat-intelligence writeups tied ShinyHunters to Abrigo, alleging CRM / SaaS exfiltration on the order of ~1.75 million records and pay-or-leak pressure. Treat categories and overlap with prior leaks as pending vendor confirmation.
Canonical record: Abrigo 2026 on BreachHistory.
Source: DeXpose