logo

Feds Shutter ShinyHunters Salesforce Extortion Site

ID: 7769a3ab-6aa0-5e11-8a5d-d695fb6d37f1

STIX ID: report--7769a3ab-6aa0-5e11-8a5d-d695fb6d37f1

Feed Name: Dark Reading

Threat Score
70/100

Date Published: 2025-10-10

Date Updated: 2026-05-05

Author: Kristina Beek

...
...

News brief: FBI and French authorities seized the BreachForums domain used by an extortion site tied to the criminal group 'Scattered Lapsus$ Hunters'. The group claims to hold up to 1 billion records and lists ~39 victim organizations (including high-profile companies) and is threatening to publish stolen Salesforce and other corporate data; the BreachForums domain shows a seizure notice but the group's Tor site remains accessible. Salesforce has acknowledged extortion attempts and stated there is no evidence the Salesforce platform itself was compromised.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.