logo

Salesforce breach escalates: Qantas & Vietnam Airlines data leaked on dark web 

ID: 8b6ce08b-83ed-5872-9c1d-a8859c202611

STIX ID: report--8b6ce08b-83ed-5872-9c1d-a8859c202611

Feed Name: Outpost24 Blog

Threat Score
88/100

Date Published: 2025-10-17

Date Updated: 2026-04-28

Author: mpeintner

...
...

Outpost24’s threat intelligence report details a mid-2025 Salesforce-related breach that escalated when the actor 'Scattered LAPSUS$ Hunters' publicly released large data sets from Qantas (~153GB, >5M records) and Vietnam Airlines (~64GB, >7.3M emails) after extortion failed; the group used a Data Leak Site and Telegram for pressure, demonstrated social-engineering-driven access via third-party SaaS compromises, and listed dozens of additional victims, highlighting widespread third-party exposure and significant reputational and phishing risks.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.