Developing: Salesforce data leak site being seized? Looks like it.

According to DataBreaches[.]Net, developing reports suggest that the breach forums leak site for ScatteredLAPSUS$Hunters is in the process of being seized. A whois lookup now shows the name servers changed to hans.ns.cloudflare[.]com and surina.ns.cloudflare[.]com, which the author guesses are government accounts. The onion site appears intact, the post notes. The article states that it will be updated as the situation evolves. The piece was posted on 6 October 2025.