Pathstone Family Office, LLC Listed by shinyhunters Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

The incident centers on Pathstone Family Office, LLC, which appeared on a leak site associated with the shinyhunters group on February 27, 2026. The group claims to have exfiltrated internal files containing over 641,000 records that include personally identifiable information and other corporate data. The number of people affected is not known, and no independent confirmation of the data volume or contents has been made public. Incidents of this type reflect a persistent pattern in which extortion-focused actors list organizations to create leverage for payment demands.

What happened

The listing was reported on February 27, 2026, and included a message from the group stating that the data would be released after a March 2, 2026 deadline if contact was not made. The message described the material as internal files taken during a ransomware operation. No further details on the intrusion method, the duration of access, or any payment demands have been released by the organization or investigators.

The group behind it: shinyhunters

Shinyhunters is a threat actor that has repeatedly appeared on data-leak forums and extortion sites. Public reporting has linked the group to the compromise of multiple organizations across sectors, followed by the publication or sale of stolen records when initial demands are unmet. Its listings typically include claims about record counts and data sensitivity, presented as pressure tactics rather than independently verified statements.

Pathstone Family Office, LLC and its sector

Pathstone Family Office, LLC operates as a wealth-management firm serving high-net-worth families and individuals. Organizations in this sector routinely maintain detailed records on clients’ financial holdings, investment activity, tax information, and personal identifiers. A breach at such a firm can expose data that extends beyond the organization itself to the private affairs of its clients.

What was likely exposed

The group’s listing refers to internal files and states that more than 641,000 records containing PII and other corporate data were taken. The precise categories of information, the number of unique individuals involved, and whether any data has been verified as authentic remain unconfirmed. Family offices of this type commonly store client names, addresses, financial account details, tax documents, and correspondence; however, the actual contents of the claimed exfiltration are not publicly established.

What's at stake

Individuals whose information appears in the claimed dataset face the possibility of targeted fraud, identity misuse, or unwanted disclosure of private financial matters. For the organization, the incident raises questions about client trust, regulatory obligations around data protection, and the costs associated with investigation and response. Because the number of affected people is unknown, the full scope of downstream consequences cannot yet be measured.

Were you affected?

Pathstone Family Office, LLC has not published a list of impacted individuals. Anyone concerned should contact the firm directly for information about their data and monitor financial and personal accounts for unusual activity. Readers may also run a free exposure scan of their email address against known breach datasets to check for prior appearances of their information.

AICompiled with AI assistance from public sources and published under our editorial standards.