From sizzle to drizzle to fizzle: The massive data leak that wasn’t

The piece details a failed mass data leakage event that initially drew attention after ScatteredLAPSUS$Hunters leaked data from six of the 39 companies listed on its dark web site. Those six were Qantas, Albertsons, GAP, Vietnam Airlines, Fujifilm, and Engie Resources, with the leaks spread across a clear net forum, an onion site, and a clear net leak site. The first six leaks were the only ones that materialised; no further leaks followed, despite ongoing claims and discussions in the group’s Telegram channel.

Qantas confirmed that its data had been leaked, according to Qantas, while Salesforce faced a separate injunction that was noted as a context for the events. The report questions why the attackers did not remove listings if money had changed hands, and highlights that even if victims paid, the leaks did not predictably disappear. Overall, DataBreaches suggests victims should not expect major campaigns to reliably result in full data leakage or payment-driven de-listing.