A hacking group using the name "Scattered LAPSUS$ Hunters" launched a data-leak site and claims to have stolen about 1 billion records from Salesforce customer databases [techcrunch.com#1][pcmag.com#1][theregister.com#1][bleepingcomputer.com#1]. The group is threatening to publish the data unless payment is made by Oct. 10, while Salesforce says its platform was not breached [pcmag.com#1][theregister.com#1]. Listings and confirmations mention companies including FedEx, Qantas and TransUnion, and researchers say samples of stolen data have already been posted [techcrunch.com#1][mashable.com#1][bleepingcomputer.com#1].
Highlights:
- Victim scope: The leak site names 39 victim companies, with reports describing about 40 Salesforce environments listed [pcmag.com#1][theregister.com#1].
- Extortion deadline: The group set an Oct. 10 deadline to avoid publication of the data [pcmag.com#1].
- Salesforce stance: Salesforce says its platform was not breached, countering the implication of a direct platform compromise [theregister.com#1].
- Data samples: The extortion site has begun posting samples of stolen data to pressure victims [bleepingcomputer.com#1].
- Named companies: Companies cited include FedEx and Qantas, while Google and TransUnion confirmed data was recently stolen in a Salesforce breach [techcrunch.com#1][mashable.com#1].
Perspectives:
- Salesforce: Salesforce maintains its platform was not breached and the listings relate to customers' environments. (The Register)
- Scattered LAPSUS$ Hunters: The group threatens to leak the alleged data unless payment is made by Oct. 10. (PCMag)
- Google and TransUnion: Both confirmed their data was recently stolen in a Salesforce breach. (Mashable)
- Security researchers: Researchers observed the group posting data samples on a new leak site to escalate pressure. (BleepingComputer)
Sources:
- Almost 1 billion Salesforce records stolen, hacker group claims – reddit.com
- Hackers Threaten to Leak 1 Billion Stolen Records From 39 Companies – pcmag.com
- 'Retired' cybercrime group demands $989M not to leak 1B Salesforce records – theregister.com
- ShinyHunters launches Salesforce data leak site to extort 39 victims – bleepingcomputer.com
- ShinyHunters hackers ransom 1 billion Salesforce records on the dark web, report says – mashable.com
- Hacking group claims theft of 1 billion records from Salesforce customer databases – techcrunch.com
