Daily Briefing for 08.17.26

Top stories.

1. General Electric, Philips, and Shell investigate alleged breaches.
2. ShinyHunters leaks alleged RingCentral data.
3. Police arrest seven suspects in connection with 2023 bank hack.

General Electric, Philips, and Shell investigate alleged breaches.

General Electric, Philips, and Shell are each investigating claims of data theft by the Clop ransomware gang, BleepingComputer reports. Clop claims to have stolen project plans, photos of facilities, engineering drawings, diagrams, blueprints, software backups, and more. Phillips told Reuters, "Philips has identified ​and contained an attempted cybersecurity compromise of a specific enterprise server related to ⁠internal data. This has no impact on customer environments." A GE spokesperson said the company is "working to assess the potential issue," and Shell told BleepingComputer, "We are working with our security teams and relevant experts to investigate."

Clop listed the companies along with 40 other alleged victims that were likely breached via a critical remote code execution flaw (CVE-2026-12569) affecting Internet-exposed PTC Windchill and PTC FlexPLM instances. The flaw was patched in June, and the US Cybersecurity and Infrastructure Security Agency (CISA) said at the time that ransomware gangs were exploiting the vulnerability.

ShinyHunters leaks alleged RingCentral data.

The ShinyHunters extortion group has published data belonging to approximately 1.6 million RingCentral users. According to Have I Been Pwned, the leaked data includes names, email addresses, physical addresses, and phone numbers.

RingCentral disclosed the incident at the end of last month, attributing the breach to a social engineering attack. A ShinyHunters member told the Register that the group gained access through a voice phishing attack, tricking an employee into giving them a password.

Police arrest seven suspects in connection with 2023 bank hack.

German and Brazilian police have arrested seven individuals—three in Europe and four in Brazil—in connection with a 2023 hack of a German bank that stole approximately €30 million (US$34.7 million) from customer accounts, the Record reports. The suspects arrested in Europe will be prosecuted in Spain and Bulgaria.

The suspects are accused of exploiting a software vulnerability in a third-party payment provider that allowed them to make unauthorized withdrawals. Authorities haven't named the bank, but media reports identified it as Germany’s Commerzbank. The bank said at the time that customers would be fully reimbursed.