Threat group targets CRM platform customers in extortion campaign.

Hackers calling themselves Scattered LAPSUS$ Hunters claim they stole roughly 1 billion records from 39 organizations’ Salesforce instances, including major brands like Adidas, Disney, Google, and Toyota. The group threatened to leak the stolen data unless Salesforce pays a ransom and said they would collaborate with plaintiffs in ongoing lawsuits against the company. Salesforce stated it found no evidence of platform vulnerabilities and believes the attacks stem from social engineering and stolen credentials used to compromise customer instances.

Read more:

https://www.securityweek.com/hackers-extorting-salesforce-after-stealing-data-from-dozens-of-customers/