press Oct 6, 2025 · Security Boulevard
Scattered Lapsus$ Hunters Extorts Victims, Demands Salesforce Negotiate
A Security Boulevard article reports that the threat group Scattered Lapsus$ Hunters has resumed operations after claiming to shut down, launching a data leak site targeting Salesforce customers and claiming to have stolen nearly one billion files. Casey Ellis is quoted discussing the group's extortion tactics and the broader implications for enterprise security.
Source description — as published
The threat group Scattered Lapsus$ Hunters, which last month said it was shutting down operations, is back with a data leak site listing dozens of high-profile Salesforce customers and claiming to have stolen almost 1 billion data files. The group is demanding that Salesforce negotiate with it or risk the data being released.