Fear and Loathing in the Comm - Scattered LAPSUS$ Hunters Turn Extortion Into a Service databreach.com/news/29-f…
The crime syndicate calling itself Scattered LAPSUS$ Hunters (SLH) says it’s finished leaking Salesforce-related data-for now. In a final statement ending what it described as a year-long campaign, the group promised to “see you all in 2026.” Hours earlier, its operators announced a new “business venture”: the world’s first “Extortion-as-a-Service” platform.
Over the same weekend, SLH released or listed six corporate datasets from its Salesforce campaign, making good on its October 10 deadline. The biggest confirmed dump came from Qantas Airways, with roughly five to six million customer records-names, email addresses, dates of birth, phone numbers, and frequent-flyer IDs-mirroring the structure of Salesforce CRM exports. Vietnam Airlines followed with a cache of about 7.3 million unique emails (and more than eight million phone numbers in parsed copies). Smaller sets appeared for Albertsons, Fujifilm, GAP Inc., and ENGIE Resources.