{"schema":"sb.node.v1","id":"sb:e/a23823e55d728e259edce2f9","kind":"entity","label":{"text":"shinyhunters","locale":"en"},"identity":{"anchor":"label:en:shinyhunters","strength":"label"},"asOf":{"knowledgeCutoff":"2026-10-10T20:32:23.797512+00:00","snapshot":"deploy 94d756dba089d5d97cb600fc40d865eb0babacbb"},"lens":{"kind":"public"},"build":{"plane":"projected","builtFrom":["entity_graph.slim.json","entity_receipts (deploy asset)","event_graph.json","truth_records (deploy asset)","corroborated_record.json"],"rule":"node-projection.entity@v1"},"standing":{"evidence":{"supporting":116,"separatePublishers":35,"basis":"documents that mention the subject and the outlets that carried them; a mention is evidence the referent is in use, not evidence about any claim","receiptsOnTopic":{"state":"partial","share":0.466,"named":54,"of":116,"basis":"documents whose own title or summary lead names the subject, over every counted document that mentions it anywhere (the entity graph's measurement); receipts are drawn from the former only","blind":["only 47% of the 116 documents measured name the subject in their own text; the rest mention it in passing, so standing.evidence.supporting overstates coverage about it"]}},"admission":{"state":"canonical","reason":"entity graph provenance 'curated'; the node carries no promotion receipt in v1","policy":"EQ-PROMOTION (receipt not carried)"},"disposition":{"state":"served","reason":"public record"},"validity":{"from":"2026-09-03","to":"2026-10-10","basis":"first and last day we saw it mentioned; not the subject's own lifetime"},"measurement":{"state":"partial","blind":["assertion coverage 0.198: about 80% of mentions carry no typed assertion"]}},"dimensions":{"domains":["cybersecurity","auto"],"activeDays":30,"assertions":{}},"up":[],"upNote":"An entity is a root: it is contained by nothing. Pan out by following R.","children":{"count":11,"byKind":{"observation":11},"withheld":{"state":"withheld","count":1,"reason":"1 receipt withheld: no source link (the same rule the topic record applies)"},"items":[{"id":"sb:o/c4c479e1cabff5a38143e6e9","kind":"observation","label":"shattered.io · 2026-10-10 · FBI Blames Contractor Patch Failure for ShinyHunters Hack [2026]","url":"https://shattered.io/fbi-contractor-patch-failure-shinyhunters-hack-2026/"},{"id":"sb:o/f4860680ccefe4fe04585a2e","kind":"observation","label":"BleepingComputer · 2026-10-09 · FBI arrests another suspected ShinyHunters hacker after agency breach","url":"https://www.bleepingcomputer.com/news/security/fbi-arrests-another-suspected-shinyhunters-hacker-after-agency-breach/"},{"id":"sb:o/5a12e67bbea30310954ec2f0","kind":"observation","label":"The Hacker News · 2026-10-09 · FBI Arrests Another ShinyHunters Suspect Reportedly Involved in Its Jobs Portal Hack","url":"https://thehackernews.com/2026/10/fbi-arrests-another-shinyhunters.html"},{"id":"sb:o/e296071562024b309f96dff2","kind":"observation","label":"Startup Fortune · 2026-10-08 · FBI fires Accenture contractor after ShinyHunters breach exposes agents","url":"https://startupfortune.com/fbi-fires-accenture-contractor-after-shinyhunters-breach-exposes-agents/"},{"id":"sb:o/7329e0a9ef6844834c72546e","kind":"observation","label":"Krebs on Security · 2026-10-07 · ShinyHunters Extorted Boeing Spin-off Prior to Arrests","url":"https://krebsonsecurity.com/2026/10/shinyhunters-extorted-boeing-spin-off-prior-to-arrests/"},{"id":"sb:o/237cb612ca570d1a80461e77","kind":"observation","label":"SecurityWeek · 2026-10-07 · FBI Blames Contractor’s Missed Patch for ShinyHunters Breach","url":"https://www.securityweek.com/fbi-blames-contractors-missed-patch-for-shinyhunters-breach/"},{"id":"sb:o/231a8922bd2eb1e4e2c91b8b","kind":"observation","label":"The Register · 2026-10-05 · FBI confirms 'multiple' arrests related to ShinyHunters hack","url":"https://www.theregister.com/security/2026/10/05/fbi-confirms-multiple-arrests-related-to-shinyhunters-hack/5301178"},{"id":"sb:o/80a83c6137c2b913d1f33010","kind":"observation","label":"Help Net Security · 2026-10-05 · Detained ShinyHunters hacker reportedly helping FBI track down fellow members","url":"https://www.helpnetsecurity.com/2026/10/05/shinyhunters-member-rey-detained-jordan-fbi/"},{"id":"sb:o/a857ef2bda96d222857ab80f","kind":"observation","label":"SecurityWeek · 2026-10-05 · Alleged ShinyHunters Leader Arrested in Jordan","url":"https://www.securityweek.com/alleged-shinyhunters-leader-arrested-in-jordan/"},{"id":"sb:o/340823b3e0d6593b6d6a0dae","kind":"observation","label":"BleepingComputer · 2026-10-04 · ShinyHunters hacker reportedly detained in Jordan, aiding FBI","url":"https://www.bleepingcomputer.com/news/security/shinyhunters-hacker-reportedly-detained-in-jordan-aiding-fbi/"}],"cursor":"c1.eyJpZCI6InNiOmUvYTIzODIzZTU1ZDcyOGUyNTllZGNlMmY5IiwibCI6ImNoaWxkcmVuIiwibyI6MTAsImsiOm51bGwsImEiOiIyMDI2LTEwLTEwVDIwOjMyOjIzLjc5NzUxMiswMDowMCJ9","order":"newest first; we keep the 11 newest receipts for this entity whose own title or summary lead (the entity graph's test) names it. Its other observations are counted in standing.evidence.supporting but are not addressable in v1"},"relations":{"count":12,"byKind":{"claim":2,"co-mentioned":10},"items":[{"id":"sb:p/5ceb6d2755a8172c0bf570f1","kind":"claim","label":"FBI Blames Contractor Patch Failure for ShinyHunters Hack [2026] — corroborated","role":"named-in","relationKind":"claim","members":1},{"id":"sb:p/df2b98b358c47095c5277fef","kind":"claim","label":"ShinyHunters Suspect Rey Reportedly Detained in Jordan, Helping FBI Identify Group Members — single source","role":"named-in","relationKind":"claim","members":1},{"kind":"relation","label":"co-mentioned with ai (46 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/6df35017362ee3806d709a60"},{"kind":"relation","label":"co-mentioned with oracle (38 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/e9cb32551b881acd55103a8e"},{"kind":"relation","label":"co-mentioned with google (36 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/c09bf65fac89559d37a352ff"},{"kind":"relation","label":"co-mentioned with china (32 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/c997aa697aae839d20e7143a"},{"kind":"relation","label":"co-mentioned with russia (31 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/2c95e8c6e2af5c15ba73f7ad"},{"kind":"relation","label":"co-mentioned with data breach (30 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/affd511a90fbac8cd073c2ab"},{"kind":"relation","label":"co-mentioned with netherlands (29 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/883f61e9e85151ce9fedc0de"},{"kind":"relation","label":"co-mentioned with oracle peoplesoft (26 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/2b41fa12ffff3e77cf1ff634"}],"cursor":"c1.eyJpZCI6InNiOmUvYTIzODIzZTU1ZDcyOGUyNTllZGNlMmY5IiwibCI6InJlbGF0aW9ucyIsIm8iOjEwLCJrIjpudWxsLCJhIjoiMjAyNi0xMC0xMFQyMDozMjoyMy43OTc1MTIrMDA6MDAifQ","order":"situations first, then claims (the subject's own maintained record, then site-wide corroborated clusters; each label ends with its standing), then co-mentions by shared documents, descending. Co-mentions are the ten strongest the entity graph keeps per entity"},"edge":{"state":"continues"},"links":{"rest":"/api/v1/node/e/a23823e55d728e259edce2f9","mcp":"traverse {\"id\":\"sb:e/a23823e55d728e259edce2f9\"}","page":"/entity/shinyhunters/"},"limits":{"levelsPerCall":1,"pageSize":10,"maxPageSize":50,"membersMax":50,"statement":"One level per call: depth is 1 and only 1, and there is no whole-graph dump. pageSize 1-50 (default 10); a page limit is a cursor, never an edge. Members are listed up to 50. At most 60 traverse calls a minute per caller (runaway-loop protection, not a meter). One knowledge cutoff is served: the deploy's."},"actions":[{"verb":"unfold","lit":true,"effect":"read","layer":"cantina","call":"traverse {\"id\":\"sb:e/a23823e55d728e259edce2f9\",\"level\":\"children\"}"},{"verb":"fold","lit":true,"effect":"read","layer":"cantina","call":"traverse {\"id\":\"sb:e/a23823e55d728e259edce2f9\"}"},{"verb":"panOut","lit":false,"effect":"read","layer":"cantina","reason":"An entity is a root: it is contained by nothing. Pan out by following R."},{"verb":"follow","lit":true,"effect":"read","layer":"cantina","call":"traverse {\"id\":\"sb:e/a23823e55d728e259edce2f9\",\"level\":\"relations\"}"},{"verb":"receipts","lit":false,"effect":"read","layer":"cantina","reason":"receipts are the observations below this node; unfold to reach them"},{"verb":"edge","lit":true,"effect":"read","layer":"cantina","call":"traverse {\"id\":\"sb:e/a23823e55d728e259edce2f9\"}"},{"verb":"asOf","lit":false,"effect":"read","layer":"cantina","reason":"v1 serves one knowledge cutoff, this deploy's; walking an earlier cutoff needs retained history (EQ-REPLAY), which v1 does not keep"},{"verb":"switchObserver","lit":false,"effect":"read","layer":"cantina","reason":"the public record is the same for every observer; traversal through a Watch's lens is not served in v1"},{"verb":"readOriginal","lit":false,"effect":"read","layer":"cantina","reason":"no translation is applied on this node; every label is the source's own text"},{"verb":"save","lit":false,"effect":"watch-declaration","layer":"workshop","reason":"saving applies to a configured Watch; configure one around this node first (free), then save it"},{"verb":"deliver","lit":false,"effect":"watch-declaration","layer":"workshop","reason":"delivery applies to a saved Watch"},{"verb":"format","lit":false,"effect":"watch-declaration","layer":"workshop","reason":"output format applies to a saved Watch"},{"verb":"deltaR","lit":false,"effect":"read","layer":"workshop","reason":"Delta R needs a saved Watch with a previous reading"},{"verb":"read","lit":false,"effect":"read","layer":"docking-bay","reason":"one-time Reads are parked until the Commander decides their shape (#938)"}]}