ShinyHunters was allegedly attempting to extort Jeppesen ForeFlight, a former Boeing aviation software business, when a suspected member of the hacking group was detained in Jordan, according to an investigation published on October 7.
Cybersecurity journalist Brian Krebs cited two sources familiar with the ShinyHunters investigation who said the reported extortion involved sensitive information allegedly stolen from the company. The sources said the material could pose aviation safety or security risks, although neither the theft nor any such threat has been independently established.
The report did not establish how the information was allegedly obtained or present independently authenticated samples of the data.
Boeing told KrebsOnSecurity it was "aware of claims by a threat actor" involving data allegedly associated with Boeing and Jeppesen ForeFlight. The aerospace company said it was reviewing the matter with its former subsidiary, but did not confirm that information had been stolen.
Jeppesen ForeFlight said its investigation had found "no impact to our operations or products". The company did not publicly establish whether any of its data had been accessed or removed.
The business provides aviation navigation information and digital flight-planning software. Boeing sold Jeppesen, ForeFlight, AerData and OzRunways to private equity firm Thoma Bravo in November 2025. The four businesses formed part of a US$10.55 billion sale.
The allegations come amid a wider law enforcement investigation into ShinyHunters. Jordanian authorities detained Saif al-Din Khader on September 29, according to Reuters. Krebs had previously identified Khader as the hacker known online as "Rey". Reuters reported on October 3, citing sources familiar with the case, that he was cooperating with the FBI to identify other suspected ShinyHunters members.
TheZeal previously reported on Khader's detention and his earlier claims that he had been speaking with law enforcement before his arrest.
Whether the extortion continued after Khader's detention remains unknown. Nor has any public evidence established his personal involvement in the alleged attempt.
