ShinyHunters exploited a Grav CMS vulnerability to breach Clop's ransomware leak site, defacing it with Pokémon artwork and claiming to have stolen server data, source code, and private keys for Clop's Tor onion service. The attack is retaliation for threats allegedly made by Clop during an ongoing feud between the cybercrime groups, with ShinyHunters now planning to extort Clop.