ShinyHunters launches Salesforce data leak site to extort 39 victims

An extortion group calling itself "Scattered Lapsus$ Hunters" (claiming ties to ShinyHunters, Scattered Spider, and Lapsus$) launched a public data-leak site listing 39 victim companies and posting stolen Salesforce data samples to extort payments before a deadline; the campaign leverages voice phishing, malicious OAuth apps, and stolen OAuth tokens to access and steal customer data, with the actors claiming up to ~1 billion records impacted across multiple waves (including Salesloft/Drift-related thefts); Salesforce states no indication of platform compromise while investigations continue.