A resident of Evangeline, Louisiana, received a sextortion email claiming to be from the ShinyHunters hacking group. The email demanded $2,000 in Litecoin within 48 hours, threatening to send intimate videos to the recipient’s contacts.
Investigation Reveals Scam
The recipient, Wayne P., contacted CyberGuy, who investigated the email. The email closely matches a widespread sextortion campaign that uses real breach information to support an invented device takeover.
The email claimed that hackers had recorded intimate videos through Wayne’s camera, but offered no proof. The message demanded cryptocurrency and imposed a 48-hour deadline, warning Wayne against contacting police and telling him not to reset his devices.
The FBI has warned that emails signed with the ShinyHunters name may contain false claims about embarrassing photos or videos. In many cases, the material described in the message never existed.
Carnival Breach
The scam contains one accurate detail: Carnival Corporation disclosed a data breach after an April 2026 social engineering attack. Carnival said its security team found unauthorized activity involving an employee account on April 14.
The company blocked the activity and brought in outside security experts. On April 22, investigators determined that the attacker had copied personal information, including names, home addresses, email addresses, phone numbers, birth dates, and government-issued identification numbers.
Carnival began sending notices on May 27 and offered eligible people in the U.S. two years of complimentary credit monitoring.
Protecting Yourself
To protect yourself from similar scams, review your email account’s security page and check for recent logins. Look for devices or locations that you do not recognize and remove any unfamiliar automatic forwarding or inbox rules.
Change your password and sign out of other sessions. Consider a credit freeze with all three major bureaus and use a trusted password manager to create and store unique passwords.
Original reporting: Fox News (HLL/CB) — read the source article.
