Hackers threaten Mark Cuban-backed ZenBusiness with data leak of "several terabytes" of data

The ShinyHunters group – lately on a hacking spree – has threatened to release “several terabytes” of data stolen from ZenBusiness, an online LLC formation and compliance platform, unless the company pays a ransom.

After publishing its ZenBusiness data breach claim on the dark web, ShinyHunters said: “This is a final warning to reach out by 25 Mar 2026 before we leak along with several annoying (digital) problems that’ll come your way.”

The notorious attacker group claims it has exfiltrated “several terabytes” of company data through platforms such as Snowflake, Mixpanel, and Salesforce.

The dangers of a ZenBusiness data breach

ZenBusiness is an AI-driven online LLC formation and compliance platform. Its services include business registration, registered agent services, and tools to help small business owners. The company markets its services as an opportunity to essentially set up a worry-free business in minutes.

We’ve reached out to ZenBusiness for comment and will update this article once we receive a reply.

Meanwhile, the company has an extensive partnership with prominent entrepreneur Mark Cuban. He serves as a strategic advisor to ZenBusiness and has invested in the firm.

However, high-profile backers may not save ZenBusiness from trouble, according to Cybernews researchers.

“The hackers probably have internal company data and could potentially reveal customer or employee information such as PII, the type of businesses that were set up with the platform,” our researchers explained.

This could put both the company, its employees, and customers at risk of various types of fraud and loss of trust and reputation.

”The breach could expose internal company operations as well, which can reduce ZenBusiness’s competitive advantage.”

Attacking Salesforce customers

The gang breached Salesforce, a cloud-based customer relationship management platform, threatening in October 2025 to target hundreds of its customers if the company refused to pay a ransom. This is likely the case with ZenBusiness as well.

Just this week, the ShinyHunters group identified Ameriprise Financial as its latest victim and, after the financial company had presumably not paid a ransom, published hundreds of gigabytes of stolen files on the dark web.

A few days earlier, the gang also threatened to reveal all data stolen from Infinite Campus, a widely used supplier of a popular Student Information System. The company admitted that an unauthorized actor managed to gain access to an employee’s Salesforce account.

ShinyHunters has additionally claimed attacks against Bumble, dating apps Hinge, Match, and OkCupid, as well as two heavyweight US investment advisory firms – Mercer Advisors and Beacon Pointe Advisors.

Unlock more exclusive Cybernews content on YouTube.