ShinyHunters, an extortion-focused hacking group, claims to have breached the Council of Europe's network, exfiltrating over 297 GB of data comprising more than 429,000 files from multiple departments. The data reportedly includes detailed personal and financial information of Council employees spanning 2011 to 2026. The group has posted the data on a Tor-based leak site and issued a deadline for negotiations. The Council of Europe has not confirmed or responded to the claims. There is no information on the vulnerability or attack vector used, nor any vendor advisory or patch information.

If the claims are accurate, the breach exposes a large volume of sensitive personal and financial data of Council of Europe employees, including payroll, bank account information, medical records, and personally identifiable information. This could lead to identity theft, financial fraud, privacy violations, and reputational damage to the organization. The public release of such data would exacerbate these impacts. There is no indication of direct impact on Council of Europe's operational systems or services.

No official remediation or patch information is available. The Council of Europe has not publicly acknowledged the incident or provided guidance. Organizations should monitor for updates from the Council of Europe and relevant authorities. Affected individuals should be alerted if and when the breach is confirmed. Since this is a data breach and extortion threat, standard incident response involving forensic investigation, containment, and notification procedures should be followed once more information is available.