Google's internal advertising division was caught up in a supply chain attack targeting Salesforce in 2025. A threat group calling itself "Scattered LAPSUS$ Hunters" claimed responsibility, releasing a sample of stolen data on October 3, 2025, with the full dataset reportedly scheduled for release on October 10. The records, described by the attackers as Google AdSense employee and contractor data, affected approximately 2.6 million individuals. Salesforce attributed the campaign to vulnerabilities in customer-side integrations rather than its core platform. The exposed data includes email addresses, phone numbers, and home addresses. Because this is workforce data rather than consumer data, the people most directly at risk are Google employees and contractors connected to its advertising operations. That combination of contact details is enough to enable targeted phishing, social engineering, and identity-based fraud against those individuals. Google has not issued detailed public statements about this specific exposure. No regulatory actions or breach notifications have been publicly confirmed at this time. Affected individuals face a credible risk of phishing attempts and impersonation, particularly through email and phone. Anyone who believes they may be included should be alert to unsolicited contact and consider monitoring their accounts for unusual activity.

Large platform ecosystems collect user identity, emails, phone numbers, authentication data, device identifiers, search and service activity, advertising signals, cloud account records, and support interactions across consumer and enterprise services.

Google has been aggressively investing in and deploying AI across its product suite, most visibly through Gemini — its large language model — integrated into Search, Workspace, and Android. The company faces sustained antitrust proceedings in the United States and Europe, including a 2024 federal court ruling finding it had illegally maintained a monopoly in search. Google has continued expanding its cloud computing business as a strategic growth priority.