ShinyHunters, a financially motivated threat group with a documented history of large-scale data extortion, has publicly claimed the exfiltration of over 429,000 documents from the Council of Europe, including HR, payroll, medical, and financial records spanning roughly 15 years for more than 10,000 staff members. The Council of Europe has confirmed it is investigating the claims but has not validated or denied them as of the discovery date. With a public extortion deadline of June 16, 2026, organizations sharing data relationships with the Council of Europe face immediate third-party exposure risk, and the breadth of sensitive personnel data raises serious regulatory and reputational consequences if the claim is substantiated.