#salesforce-breach

[ follow ]
#shinyhunters #social-engineering #data-exfiltration #oauth-token-compromise #supply-chain-attack
fromTheregister
3 weeks ago

Salesloft hackers outsourcing ransom negotiations for $10

Scattered Lapsus$ Hunters has launched an unusual crowdsourced extortion scheme, offering $10 in Bitcoin to anyone willing to help pressure their alleged victims into paying ransoms.. The cybercrime collective is encouraging followers to email senior executives at organizations it claims to have breached, urging them to pay up and avoid publicity about the group's new data leak site. Those who contact executives through personal email accounts will receive higher rewards,
Information security
#social-engineering
fromMarTech
3 weeks ago
Information security

Salesforce says social engineering to blame for breaches leading to ransom demands | MarTech

fromMarTech
3 weeks ago
Information security

Salesforce says social engineering to blame for breaches leading to ransom demands | MarTech

more#social-engineering
Information security
fromDataBreaches.Net
3 weeks ago

PowerSchool hit by Salesloft Drift campaign, but hackers claim that there is no risk of harm or ransom - DataBreaches.Net

PowerSchool's Salesforce customer-support database was accessed via the Drift app breach, exposing customer contact information, support case metadata, and support case contents.
Information security
fromDataBreaches.Net
3 weeks ago

More Salesforce customer attacks revealed in new leak site by Scattered LAPSUS$ Hunters (1) - DataBreaches.Net

Scattered LAPSUS$ Hunters opened a leak site and demanded ransom from Salesforce, threatening to publish ~1B customer records by October 10, 2025.
Information security
fromTechzine Global
1 month ago

1.5 billion Salesforce records stolen according to ShinyHunters

ShinyHunters exfiltrated over 1.5 billion Salesforce records from 760 companies via compromised Salesloft OAuth tokens and used the data to extort victims.
fromSecurityWeek
1 month ago

Security Industry Skeptical of Scattered Spider-ShinyHunters Retirement Claims

Some of the recent attacks attributed to Scattered Spider also appear to have involved ShinyHunters, a cybercrime group specializing in extortion. The two groups are believed to have merged. In a message posted online last week, Scattered Spider and ShinyHunters announced their retirement. A lengthy manifesto mentions recent high-profile hacks and taunts law enforcement. "Our objectives having been fulfilled, it is now time to say goodbye," the hackers said.
Information security
Information security
fromDataBreaches.Net
1 month ago

Update: Kering confirms Gucci and other brands hacked; claims no conversations with hackers? - DataBreaches.Net

Millions of customers of Kering brands had personal data accessed in two Salesforce breaches, with alleged ransom negotiations and partial disclosure to authorities and customers.
Information security
fromApp Developer Magazine
10 months ago

Salesforce data breach linked to Tenable via Salesloft Drift

A Salesforce-Salesloft Drift integration breach exposed limited customer contact and support case data at multiple organizations, including Tenable, while core product data remained uncompromised.
#supply-chain-attack
more#supply-chain-attack
Information security
fromZDNET
1 month ago

'2.5 billion Gmail users at risk'? Entirely false, says Google

Google did not issue a broad warning about a Gmail breach; attackers targeted Salesforce cloud data and phishing/vishing threats remain active.
Information security
fromTheregister
2 months ago

Google links Salesforce data thefts to Salesloft breach

Attackers stole OAuth tokens from the Drift app used by Salesloft to access Salesforce databases and exfiltrate sensitive credentials and customer records.
Information security
fromApp Developer Magazine
10 months ago

Salesforce breach let hackers steal Google customer data

A Google corporate Salesforce instance was breached by UNC6040, exposing basic business contact data, prompting impact analysis and mitigation while extortion campaigns (UNC6240/ShinyHunters) emerged.
[ Load more ]