Scattered Lapsus$ Hunters, sometimes referred to as UNC6395, is a cybercrime group. They first appeared around August 2025, [1] and have claimed responsibility for several notable breaches, including those of stealing 1 billion customer records from SalesForce, [2] [3] [4] Oracle and Doxing ICE officials. [5] They used extortion, and their weibsite BreachForums.hn was captured by US and French police forces. [6] The gang claimed on their telegraph channel to be formed from members of other gangs Scattered Spider, Lapsus$ and ShinyHunters. [1]
{{cite web}}: CS1 maint: multiple names: authors list (link)