Hackers Say They Have Personal Data of Thousands of NSA and Other Government Officials - DataBreaches.Net

"A hacking group that recently doxed hundreds of government officials, including from the Department of Homeland Security (DHS) and Immigration and Customs Enforcement (ICE), has now built dossiers on tens of thousands of U.S. government officials, including NSA employees, a member of the group told 404 Media. The member said the group did this by digging through its caches of stolen Salesforce customer data."

"As well as NSA officials, the person sent 404 Media personal data on officials from the Defense Intelligence Agency (DIA), the Federal Trade Commission (FTC), Federal Aviation Administration (FAA), Centers for Disease Control and Prevention (CDC), the Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF), members of the Air Force, and several other agencies. The news comes after the Telegram channel belonging to the group, called Scattered LAPSUS$ Hunters, went down following the mass doxing of DHS officials and the apparent doxing of a specific NSA official."

"It also provides more clarity on what sort of data may have been stolen from Salesforce's customers in a series of breaches earlier this year, and which Scattered LAPSUS$ Hunters has attempted to extort Salesforce over. "That's how we're pulling thousands of gov [government] employee records," the member told 404 Media. "There were 2000+ more records," they said, referring to the personal data of NSA officials. In total, they said the group has private data on more than 22,000 government officials."

A hacking group assembled dossiers on more than 22,000 U.S. government officials by mining caches of stolen Salesforce customer data. The group provided personal data covering employees from the NSA, DIA, FTC, FAA, CDC, ATF, members of the Air Force, DHS, ICE and multiple other agencies. The group's Telegram channel, Scattered LAPSUS$ Hunters, went offline after mass doxing of DHS officials and an apparent doxing of a specific NSA official. The group has sought to extort Salesforce over breaches earlier this year. Apart from earlier DHS and DOJ postings, the wider dataset does not appear to have been publicly released, and several agencies and Salesforce did not respond to requests for comment.

Read at DataBreaches.Net