Hacking group claims theft of 1 billion records from Salesforce customer databases

TechCrunch
TechCrunch
3M ago
73 views
A hacking group claims to have stolen 1 billion records from Salesforce clients, launching a dark web site to extort victims.
Hacking group claims theft of 1 billion records from Salesforce customer databases
A What happened
A hacking group, known as Lapsus$, Scattered Spider, and ShinyHunters, has launched a dark web site to extort victims by threatening to release approximately 1 billion records stolen from Salesforce customer databases. The site, named Scattered LAPSUS$ Hunters, aims to pressure companies into paying to prevent public disclosure of their data. High-profile companies such as Allianz Life, Google, and Qantas have confirmed their data was compromised. Salesforce has acknowledged the extortion attempts but asserts that its platform has not been compromised. The hackers demand negotiations with Salesforce, suggesting that the company has not yet engaged with them. This incident reflects a growing trend among cybercriminals who now threaten to publish stolen data rather than just encrypting it for ransom.

Key insights

  • 1

    Extortion Tactics Evolving: Cybercriminals are shifting from encryption to public data threats.

  • 2

    High-Profile Victims: Major companies like Google and Qantas are affected by the breach.

  • 3

    Salesforce's Response: Salesforce claims no compromise of its platform amid extortion attempts.

Takeaways

The incident highlights the increasing risks associated with cloud data security.

Topics

Technology & Innovation Cybersecurity