logo

FBI takes down BreachForums portal used for Salesforce extortion

ID: 79fcd648-bf9b-51e9-b25c-6b8fd9f04d84

STIX ID: report--79fcd648-bf9b-51e9-b25c-6b8fd9f04d84

Feed Name: Bleeping Computer

Threat Score
78/100

Date Published: 2025-10-10

Date Updated: 2026-04-20

Author: Bill Toulas

...
...

The FBI seized the BreachForums clearnet domain used by ShinyHunters and allied groups to host Salesforce data-leak extortion content; law enforcement claims control of the domain and archived forum/database backups since 2023, while the actors’ Tor site remains online and a dark-web leak of purportedly over one billion stolen records (targeting many major companies) was still scheduled by the threat actors.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.