The incident is one of several breaches affecting Salesforce in 2025. A group calling itself “Scattered LAPSUS$ Hunters” released a limited sample of the stolen database on October 3 2025. The records have since been indexed and anonymized in our search engine. According to the attackers the full dataset is scheduled for release on October 10 2025.

Data found in hackers’ sample – 🧍 Personal Information

Full name – ✅ Present First and last names (separate fields) – ✅ Present Title / salutation – ✅ Present Gender – ✅ Present Date of birth – ✅ Present Language – ✅ Present Nationality – ⛔ Empty

📧 , Contact Information

Email address – ✅ Present Phone number – ✅ Present Mobile number – ⛔ Empty Home phone – ✅ Present Contact preference flags (email phone SMS mail) – ✅ Present Alternate or secondary emails – ⛔ Empty

🏠 , Address / Location Data

Street address – ✅ Present City – ✅ Present State / province – ✅ Present Postal code – ✅ Present Country – ✅ Present, Latitude / longitude – ✅ Present (on FCA contact)

🏢 , Account / Company Information

Company name – ✅ Present Account ID and record ID – ✅ Present Record type – ✅ Present Dealer / business type – ✅ Present Customer market – ✅ Present (“USA”) Dealer code or company code – ✅ Present Region or business unit – ✅ Present, Parent dealer or preferred dealer – ⛔ Empty

🚘 , Vehicle Ownership & Interest

Owns new vehicles – ✅ Present Owns pre-owned vehicles – ✅ Present Number of cars owned – ✅ Present Community or club membership flags – ✅ Present Vehicle interest fields (sports / preferences) – ⛔ Empty

💬 , Marketing & Communication

Direct-marketing permission – ✅ Present Newsletter subscription – ✅ Present Privacy hold / contact privacy – ✅ Present Soft-spam flag – ✅ Present Preferred language – ✅ Present Lead source – ✅ Present (“MODIS”) Legal resolution or disclaimer fields – ⛔ Empty

📊 , Data Quality & Profiling

Data quality score – ✅ Present Data quality description – ✅ Present Basic validation check – ✅ Present Internal domain detection flag – ✅ Present Email correctness flag – ✅ Present

Record creation date – ✅ Present Record modification date – ✅ Present SystemModstamp – ✅ Present Created by / modified by user IDs – ✅ Present Owner ID – ✅ Present Photo URL – ✅ Present Deleted / priority flags – ✅ Present, Legacy creation / migration / batch IDs – ✅ Present (FCA records)

🔗 , Cross-System & IDs

Internal Salesforce record IDs – ✅ Present Legacy customer source ID – ✅ Present Legacy batch ID – ✅ Present External IDs (social Jigsaw, etc.) – ⛔ Empty