ShinyHunters hacked Clop’s leak site using a Grav CMS path traversal flaw — 25 September 2026

ShinyHunters compromised and defaced Clop’s data leak site by exploiting an unpatched Grav CMS flaw. Clop said it moved the leak site to a new Tor address.