Adelante Soluciones Financieras (Addi.com) Listed by shinyhunters Ransomware Group

On May 5, 2026, the shinyhunters ransomware group listed Adelante Soluciones Financieras, operating as Addi.com, on its leak site after the company failed to meet their demands. The attackers claim to have exfiltrated more than 16 million unique person records totaling over 518GB of compressed internal files containing significant personal information.

What's Publicly Reported from Reporting

Public reporting on the ransomware.live portal describes the incident as a ransomware attack in which shinyhunters exfiltrated internal files from the Colombian fintech company. The data set is said to include personally identifiable information, financial and transaction records, credit card details, KYC documentation, and background check data obtained from TransUnion and Experian.

The group stated that despite “incredible patience” and multiple offers, Addi.com chose not to reach an agreement. As a result, the 518GB dataset was published on the shinyhunters leak site with a SHA256 hash for verification. The exact number of individuals whose records may have been exposed remains listed as unknown in available reporting, though the volume of unique person records points to a breach affecting millions of customers and applicants.

Why This Matters for You and Your Family

When a financial services company loses control of names, addresses, government identification numbers, credit card data, and credit-bureau records, the risk extends far beyond the company itself. You and your family could face identity theft, fraudulent loan applications, unauthorized bank accounts, and long-term damage to your credit scores. Children’s records included in household files can be particularly attractive to criminals because minors’ credit histories are often clean and go unnoticed for years.

Credit card details and KYC documents are especially dangerous because they allow criminals to impersonate you during account openings or verification processes. Once initial access is gained, attackers frequently chain that information with other leaks to build complete profiles. For ordinary families, this means months or years of monitoring statements, disputing charges, and repairing credit that should never have been put at risk.

The Doxxing and Identity-Chain Implications

Leaked KYC and credit-bureau records create a direct bridge between your real identity and any online handles, usernames, or email addresses you have used. Attackers can map these connections quickly, turning a single breach into a cascading series of account takeovers. Gaming accounts belonging to you or your children are frequent targets because they often share passwords or recovery emails with other services and can be hijacked to spread malware or demand further ransom.

Once the identity chain is established, doxxing becomes straightforward. Public records, social profiles, phone numbers, and addresses can be correlated with the freshly exposed financial data. This is exactly why continuous monitoring that understands these linkages matters. DoxxScan by GalaxyWarden performs continuous monitoring across 13.1B+ breach records and 100+ platforms, uses AI-powered identity-chain mapping, provides hands-on remediation by specialists, and offers family and household coverage that explicitly includes children’s gaming accounts.

Shinyhunters’ Publicly Known Track Record

Public reporting attributes shinyhunters with emerging in 2020 and conducting numerous high-profile data theft operations. The group is known for targeting technology companies, online service providers, and organizations holding large customer databases. Notable prior victims have included major consumer platforms and gaming-related services according to industry trackers.

Their typical playbook involves initial access through compromised credentials or vulnerabilities, followed by exfiltration of sensitive customer and internal files. When ransom demands are not met, shinyhunters publish samples and eventually release the full dataset on dedicated leak sites. The group often emphasizes “patience” in their messages while increasing pressure through partial leaks and public shaming. Available reporting describes this pattern across multiple incidents, though exact attribution can vary between researchers.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, usernames, and real identity so you can break the chains attackers rely on.
• Rotate any password you used on Addi.com or related financial services anywhere it has been reused, and switch to 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring so the next breach exposing your family is caught and addressed in hours instead of months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts which often chain back to the same personal data.
• Let remediation specialists handle takedown requests across data brokers and exposed profiles while you focus on securing your own accounts.

The incident shows how quickly financial data can fuel larger identity crimes when left unchecked. Taking deliberate steps now can limit the damage from this and future leaks. Start your DoxxScan trial and put continuous monitoring, identity-chain mapping, and specialist remediation to work for your entire family.