Adelante Soluciones Financieras (Addi.com) Listed by shinyhunters Ransomware Group: Ransomware Claim — What’s Alleged & What To Do
Adelante Soluciones Financieras (Addi.com) was listed by the shinyhunters ransomware group on May 05, 2026, with internal files reported as exfiltrated. Individuals should check whether their information was exposed and take appropriate protective steps.
Adelante Soluciones Financieras, which operates Addi.com, has been listed by the ransomware group shinyhunters. The listing, reported on 5 May 2026, states that internal files were exfiltrated during a ransomware attack. The number of individuals affected remains unknown, and no independent confirmation of the data volume or contents has been made public.
Breaking down the breach
The incident is known only through the group’s listing on its leak site. The entry describes the exfiltration of internal files and includes a SHA256 hash for a compressed archive reported as 518 GB or larger. The listing was updated on 5 May 2026. No details have been released by the organisation itself, and the exact timing of the intrusion, the method of initial access, and any ransom demands or payments remain undisclosed.
The group behind it: shinyhunters
Shinyhunters is a ransomware operator that maintains a public leak site where it lists organisations it claims to have targeted. The group typically posts samples or descriptions of data after negotiations with the victim fail. It has previously listed companies across multiple sectors, publishing claims about the scale and sensitivity of material it says it obtained. In this case the group states that Adelante Soluciones Financieras did not reach an agreement despite offers made.
About Adelante Soluciones Financieras
Adelante Soluciones Financieras provides financial services through the Addi.com platform. Organisations of this type routinely collect and store customer identification records, transaction histories, and credit-related information to support lending and account management. A breach involving such an entity can expose data used for identity verification and financial decision-making, affecting both customers and any third-party sources referenced in the records.
The information in question
The only confirmed detail is that internal files were taken. The listing claims the material includes records for over 16 million individuals containing personal identifiers, financial and transaction data such as credit-card information, know-your-customer documentation, and background-check material from TransUnion and Experian. These descriptions originate from the group; the organisation has not confirmed the contents, and independent verification is not available.
The real-world impact
Individuals whose records appear in the claimed dataset could face risks of identity theft or financial fraud if the material is later published or sold. The organisation may encounter regulatory scrutiny, operational disruption, and costs associated with investigation and remediation. Because the scale and sensitivity of the data remain unconfirmed, the precise extent of exposure for any specific person cannot yet be determined.
If your data was in this claimed breach
Monitor bank and credit-card statements for unusual activity and review credit reports for unauthorised accounts. Enable multi-factor authentication on any financial or email accounts and consider placing a credit freeze if you have not already done so. Contact Adelante Soluciones Financieras directly for any official guidance it may issue. Readers can also run a free exposure scan of their email address against known breach data to check for appearances in previously published lists.
AICompiled with AI assistance from public sources and published under our editorial standards.
How this breach connects
More recent breaches
The Canada Life Assurance Company (canadalife.com) Listed by shinyhunters Ransomware GroupBerkadia Commercial Mortgage LLC Listed by shinyhunters Ransomware GroupJCPenney & several other subsdiaries under Catalyst Brands & Authentic Brands Group Listed by shinyhunters Ransomware GroupInstructure Canvas LMS breach exposes 280M education recordsLatest breaches
Publicly posted by shinyhunters — unverified claim, pending independent verification
Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.
Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.