Skip to content

CyberSIXT Search

Threat actor · coverage timeline

Scattered Lapsus$ Hunters

30 articles from 11 outlets between 12 Sep 2025 and 27 Jul. First reported by GBHackers. The busiest day was Fri 10 Oct 2025, with 3 articles.

Articles: 30; all time · from 11 outlets
Days with coverage: 24; of 319 days · all time
Busiest day · all time: 3; articles on Fri 10 Oct 2025
Last 7 days: 0a day; vs 0.1 a day · previous 7 days
First report: 12 Sep 2025; GBHackers
CVEs named: 0; in these articles

Coverage over time

30 articles · 12 Sep 2025 – 27 Jul

12 Sep 2025First report12 Sep 2025 · GBHackers

Show as table

Scattered Lapsus$ Hunters: articles per day
Day (UTC)	Articles	Outlets
Fri 12 Sep 2025	1	GBHackers 1
Mon 15 Sep 2025	1	BleepingComputer 1
Wed 17 Sep 2025	1	Dark Reading 1
Sun 21 Sep 2025	1	DataBreaches 1
Fri 3 Oct 2025	3	SOCRadar 1, DataBreaches 1, Dark Reading 1
Mon 6 Oct 2025	1	SecurityWeek 1
Tue 7 Oct 2025	1	GBHackers 1
Wed 8 Oct 2025	1	Dark Reading 1
Fri 10 Oct 2025	3	Dark Reading 1, DataBreaches 1, Unit 42 1
Mon 13 Oct 2025	1	GBHackers 1
Tue 14 Oct 2025	1	SecurityOnline 1
Mon 20 Oct 2025	1	Unit 42 1
Wed 22 Oct 2025	1	SecurityOnline 1
Wed 5 Nov 2025	1	SecurityOnline 1
Fri 21 Nov 2025	1	SOCRadar 1
Wed 26 Nov 2025	2	Unit 42 1, Krebs on Security 1
Fri 28 Nov 2025	1	SecurityWeek 1
Tue 6 Jan	2	SecurityWeek 1, Dark Reading 1
Tue 27 Jan	1	SecurityWeek 1
Mon 2 Feb	1	Krebs on Security 1
Wed 25 Feb	1	The Hacker News 1
Tue 7 Apr	1	SecurityWeek 1
Wed 29 Apr	1	Ars Technica 1
Mon 27 Jul	1	DataBreaches 1

Articles

30 articles

Mon 27 Jul1 article

19:31
Frontier Airlines faces third breach as security flaws lingerDataBreaches

Wed 29 Apr1 article

11:32
Trivy Supply Chain Attack Hits Checkmarx, Bitwarden via TeamPCPArs Technica

Tue 7 Apr1 article

06:21
Wynn Resorts hit by ShinyHunters breach affecting 21,775 staffSecurityWeek

Wed 25 Feb1 article

15:36
SLH criminal group pays women $500 to $1,000 for helpdesk vishingThe Hacker News

Mon 2 Feb1 article

16:40
Please Don’t Feed the Scattered Lapsus Shiny HuntersKrebs on Security

Tue 27 Jan1 article

15:10
Over 100 Organizations Targeted in ShinyHunters Phishing CampaignSecurityWeek

Tue 6 Jan2 articles

21:05
Scattered Lapsus$ Hunters Snared in Cyber Researcher HoneypotDark Reading
14:30
Researchers Trap Scattered Lapsus$ Hunters in HoneypotSecurityWeek

Fri 28 Nov 2025 20251 article

10:50
In Other News: HashJack AI Browser Attack, Charming Kitten Leak, Hacker UnmaskedSecurityWeek

Wed 26 Nov 2025 20252 articles

17:50
Meet Rey, the Admin of ‘Scattered Lapsus$ Hunters’Krebs on Security
11:15
The Golden Scale: 'Tis the Season for Unwanted GiftsUnit 42

Fri 21 Nov 2025 20251 article

14:51
Scattered LAPSUS Hunters Escalate With New Channel and Gainsight BreachSOCRadar

Wed 5 Nov 2025 20251 article

02:30
Trustwave Confirms ‘Trinity of Chaos’ Alliance: Scattered LAPSUS$ Hunters Form EaaS SupergroupSecurityOnline

Wed 22 Oct 2025 20251 article

01:45
Scattered LAPSUS$ Hunters Pivot to EaaS, Launch Insider Recruitment Campaign After Salesforce ExtortionSecurityOnline

Mon 20 Oct 2025 20251 article

23:40
The Golden Scale: Notable Threat Updates and Looking AheadUnit 42

Tue 14 Oct 2025 20251 article

01:15
Hacker Alliance Demands Ransom: Scattered LAPSUS$ Hunters Claim 1 Billion Records Stolen from SalesforceSecurityOnline

Mon 13 Oct 2025 20251 article

06:45
Hackers Claim Massive Salesforce Breach: 1 Billion Records StolenGBHackers

Fri 10 Oct 2025 20253 articles

21:35
The Golden Scale: Bling Libra and the Evolving Extortion EconomyUnit 42
21:35
Telstra Denies Scattered Spider Data Breach Claims Amid Ransom ThreatsDataBreaches
17:41
Feds Shutter ShinyHunters Salesforce Extortion SiteDark Reading

Wed 8 Oct 2025 20251 article

21:30
Red Hat Hackers Team Up With Scattered Lapsus$ HuntersDark Reading

Tue 7 Oct 2025 20251 article

07:10
Hackers Launch Leak Portal to Publish Data Stolen from Salesforce InstancesGBHackers

Mon 6 Oct 2025 20251 article

11:55
Hackers Extorting Salesforce After Stealing Data From Dozens of CustomersSecurityWeek

Fri 3 Oct 2025 20253 articles

20:10
Scattered Lapsus$ Hunters Returns With Salesforce Leak SiteDark Reading
14:40
More Salesforce customer attacks revealed in new leak site by Scattered LAPSUS$ HuntersDataBreaches
13:05
Dark Web Profile: Scattered Lapsus$ HuntersSOCRadar

Sun 21 Sep 2025 20251 article

19:20
When “Goodbye” isn’t the end: Scattered LAPSUS$ Hunters hack onDataBreaches

Wed 17 Sep 2025 20251 article

20:00
'Scattered Lapsus$ Hunters,' Others Announce End of Hacking SpreeDark Reading

Mon 15 Sep 2025 20251 article

04:55
FBI warns of UNC6040, UNC6395 hackers stealing Salesforce dataBleepingComputer

Fri 12 Sep 2025 20251 article

08:05
LAPSUS$ Hunters 4.0 Announce Permanent ShutdownGBHackers · first report