Archive · 4 Oct 2025
Hackers Claim Nearly 1 Billion Salesforce Records Stolen
A group of hackers, Scattered LAPSUS$ Hunters, claim to have stolen nearly a billion records from Salesforce customers.
They used 'vishing,' or phone calls pretending to be IT support, to trick employees.
The hackers say they targeted companies using Salesforce software.
The group also listed other companies they claim to have hacked on a dark web site.
Salesforce states their systems weren't hacked.
The group is suspected to be part of a larger cybercriminal network.
UK police arrested four individuals related to cyberattacks on retailers, but it is uncertain if the arrests are linked.
Hackers claim to have stolen nearly 1 billion records from Salesforce customers.
The group used 'vishing' to trick employees.
Scattered LAPSUS$ Hunters published a dark web list of allegedly hacked companies.
Salesforce denies any compromise of its systems.
UK police arrested four individuals related to cyberattacks on UK retailers.
- Who
- Scattered LAPSUS$ Hunters (UNC6040)
- What
- Claimed to have stolen almost 1 billion records from Salesforce customers.
- When
- Claims made on Friday.
- Where
- Targeting Salesforce customers, with reported incidents in the UK.
- Why
- Motive unclear; possible ransom demands.
Hackers
Salesforce
Compromise
Hackers
Claim successful data theft; claim to have access to the data.
Salesforce
Deny any compromise of their systems.
- Hacker Group
- Scattered LAPSUS$ Hunters (UNC6040)
- Alleged Stolen Records
- Nearly 1 billion
- Targeted Companies
- Salesforce customers, including UK retailers
- Breach Method
- Vishing (voice phishing)
- Salesforce Response
- Systems not compromised
- Dark Web Site
- Lists approx. 40 other allegedly hacked companies
- UK Arrests
- Four people under 21
