This presentation will address Unit 42’s investigations into Com-affiliated data theft and extortion activity in 2026, specifically delineating between two clusters (Bling Libra aka ShinyHunters and CL-CRI-1116 aka BlackFile) based on their use of different double extortion techniques to pressure victims into paying ransom demands.