Hackers Claim Billion Salesforce Records, Company Denies Breach

A hacking group called Scattered LAPSUS$ Hunters claims to have stolen 1 billion records from companies using Salesforce cloud services, exploiting third-party integrations like Salesloft and Drift OAuth tokens. Victims reportedly include Google, Workday, Qantas, and FedEx. Salesforce confirmed no breach of its core platform, citing compromised credentials instead. Experts warn the leaked data could fuel further cyberattacks and supply chain risks.