GBHackersMayura Kathir
LAPSUS$ Hunters 4.0 Announce Permanent Shutdown
In a startling development, on 8 September the Telegram channel “scattered LAPSUS$ hunters 4.0” said it would “go dark” after taunting law enforcement for repeated missteps. The group claimed victory over investigations and vowed that no future activity would follow their signature data breaches, describing the pause as a permanent retirement from blackhat operations.
A 11 September communique appeared on BreachForums timed after DataBreaches’ report on Salesforce attacks, in which the hunters apologised for earlier silence and explained that 72 hours had allowed them to test contingency plans and consult with family. They described weeks of diversions, including alleged disruptions to Jaguar’s factories and “superficially” hacking Google and overwhelming Salesforce’s defenses, purportedly to mislead security firms and government agencies.
The statement listed operatives by pseudonyms and said they would vanish into private life, funded by ill-gotten gains or pursuing quiet study of systems; the group also extended condolences to eight individuals affected by related arrests. according to DataBreaches.
Story timeline Scattered Lapsus Hunters
Full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Fri 12 Sep 2025 · 08:05 UTC | GBHackers | LAPSUS$ Hunters 4.0 Announce Permanent Shutdown (this article) |
| Wed 29 Apr · 11:32 UTC | Ars Technica | Trivy Supply Chain Attack Hits Checkmarx, Bitwarden via TeamPCP |
| Mon 27 Jul · 19:31 UTC | DataBreaches | Frontier Airlines faces third breach as security flaws linger |