Hack at Anodot leaves over a dozen breached companies facing extortion

Anodot suffered a breach beginning April 4 where attackers (attributed to the ShinyHunters group) stole authentication tokens from the vendor and used them to access and exfiltrate cloud-stored customer data across at least a dozen companies; victims face extortion and potential public disclosure of stolen data. The group is known for social engineering and targeting cloud-integrated analytics/monitoring providers to harvest credentials and pivot into customer environments.