Scattered Lapsus$ Hunters

Last updated

Scattered Lapsus$ Hunters, sometimes referred to as UNC6395, is a cybercrime group. They first appeared around August 2025, [1] and have claimed responsibility for several notable breaches, including those of stealing 1 billion customer records from SalesForce, [2] [3] [4] Oracle and Doxing ICE officials. [5] They used extortion, and their weibsite BreachForums.hn was captured by US and French police forces. [6] The gang claimed on their telegraph channel to be formed from members of other gangs Scattered Spider, Lapsus$ and ShinyHunters. [1]

References

  1. 1 2 "Three notorious cybercrime gangs appear to be collaborating". TheRegister. Retrieved 18 October 2025.
  2. Whittaker, Lorenzo Franceschi-Bicchierai, Zack (3 October 2025). "Hacking group claims theft of 1 billion records from Salesforce customer databases". TechCrunch. Retrieved 18 October 2025.{{cite web}}: CS1 maint: multiple names: authors list (link)
  3. Goodin, Dan (8 October 2025). "Salesforce says it won't pay extortion demand in 1 billion records breach". Ars Technica. Retrieved 18 October 2025.
  4. "Become a Computing member Hacking group claims theft of one billion Salesforce records". Computing.co.uk. Retrieved 18 October 2025.
  5. Cox ·, Joseph (17 October 2025). "Hackers Dox Hundreds of DHS, ICE, FBI, and DOJ Officials". 404 Media. Retrieved 18 October 2025.
  6. "Cops seize Scattered Lapsus$ Hunters' BreachForums domain". TheRegister. Retrieved 18 October 2025.