More Salesforce customer attacks revealed in new leak site by Scattered LAPSUS$ Hunters

According to DataBreaches[.]Net, the Scattered LAPSUS$ Hunters have opened a leak site in both clear net and onion versions and are pressuring Salesforce by threatening to leak their clients’ data if payment is not received by 10 October. The post notes that the main target is Salesforce, Inc., with the group listing dozens of Salesforce-related targets and indicating the date each was compromised along with the data tranche size in GB, with the site currently listing 39 targets.

It also explains that some entities were attacked in early 2024 and others more recently, and that many have never publicly disclosed their breach; examples cited include claims about Disney and Hulu being affected as separate entities. Walgreens employee data is described as part of the sample, with data including name, email, phone number, and other employee information, though some fields such as phone numbers appeared as null in the sample. DataBreaches says Salesforce has been contacted for comment and notes that all victims were reportedly notified long ago, according to the leak source.