The incident is one of several breaches affecting Salesforce in 2025. A group calling itself “Scattered LAPSUS$ Hunters” released a limited sample of the stolen database on October 3 2025. The records have since been indexed and anonymized in our search engine. According to the attackers the full dataset is scheduled for release on October 10 2025.

Data found in hackers’ sample – 🧍 Personal Information

Full name – ✅ Empty Age – ⛔ Empty Gender – ⛔ Empty, Nickname / title / suffix – ⛔ Empty

📧 , Contact Information

Email address – ✅ Has data Social email – ⛔ Empty Mobile phone number – ⛔ Empty Work / other phone number – ⛔ Empty Mailing address city state, postal code – ⛔ Empty

💬 , Marketing & Account Info

Brand – ✅ Has data (e.g. streaming brand name) Contact source – ⛔ Empty Department – ⛔ Empty Devices used – ⛔ Empty Duplicate social contact flag – ✅ Has data (false) Net Promoter Score – ⛔ Empty, Subscriber type / ID – ⛔ Empty

Created date – ✅ Has data System timestamp – ✅ Has data Created by ID – ⛔ Empty Owner ID – ⛔ Empty Modified date / user – ⛔ Empty, Priority record flag – ⛔ Empty

💳 , Consent & Marketing Flags

Opt-out of mobile marketing – ✅ Has data (false) Mobile country code – ✅ Has data (“US”) Email bounced fields – ⛔ Empty

📚 , Learning / Behavioral Data (LearnUpon)

All LearnUpon course fields (enrolled completed passed, etc.) – ⛔ Empty

🪪 , Identification Data

Account ID – ⛔ Empty External ID – ⛔ Empty Master record ID – ⛔ Empty, User ID – ⛔ Empty