Follow ZDNET: Add us as a preferred source on Google. A hacking group is claiming it stole roughly 1 billion records from dozens of companies that store their customer data in cloud databases hosted on Salesforce. The hackers reportedly created a site on the dark web, which security researchers and TechCrunch have seen. It lists the victim companies and threatens to release stolen data if it doesn't get paid. The campaign is tied to a new cybercrime alliance called Scattered Lapsus$ Hunters, which brings together members of Scattered Spider, Lapsus$, and ShinyHunters -- three of the most notorious English-speaking hacking groups active today. The group allegedly broke into cloud databases used by numerous companies on the Salesforce platform and stole massive amounts of customer data. According to TechCrunch, they claim to be holding about 1 billion records in total. On their site, they posted a warning telling companies to "contact us to regain control... and prevent public disclosure of your data." Also: Data-stealing cyberattacks are surging - 7 ways to protect yourself and your business Resecurity reported that Scattered Lapsus$ Hunters also operated a Telegram channel, now banned, where members coordinated threats, teased leaks, and promoted new Ransomware-as-a-Service tools. Scattered Spider reportedly provided initial access to targets, ShinyHunters managed data theft and dumps, and LAPSUS$ members also participated, with all three groups working together on high-profi...
Hackers stole 1 billion records from Salesforce customer databases with this simple trick - don't fall for it
ZDNet
·Elyse Betters Picaro
·Published Oct 3, 2025
·Updated
Affected Software
1 affected component
Salesforce Salesforce
Frequently Asked Questions
1
What is the main topic of this article?
The article discusses a hacking incident where approximately 1 billion customer records were stolen from Salesforce databases.
2
What hacking method was used to steal the records?
The article describes a simple trick employed by hackers to gain access to the Salesforce databases.
3
Who are the victims of this data breach?
The data breach affects dozens of companies that use Salesforce to store their customer data.
4
What security implications are highlighted in the article?
The article emphasizes the risks associated with cloud storage and the importance of securing customer data.
5
What products or software are explicitly mentioned as affected?
The affected product mentioned in the article is Salesforce.