A threat actor calling itself "Scattered LAPSUS$ Hunters" obtained customer records from Max, the streaming service operated by Warner Bros. Discovery, as part of a broader campaign targeting Salesforce integrations in 2025. Max was one of approximately 39 organizations listed on the group's dark web leak site. The attackers released a sample of the stolen data on October 3, 2025, and announced plans to publish the full dataset on October 10, 2025. The breach affected 7.8 million customer records. Salesforce attributed the intrusion to vulnerabilities in customer-side platform integrations rather than its core infrastructure. The exposed data includes full names, email addresses, phone numbers, and partial postal addresses including cities, ZIP codes, and country. Marketing and subscription metadata was also present, including email opt-in status and record creation timestamps dating to mid-2021. While no passwords, payment details, or viewing histories appear in the confirmed sample, the combination of contact information and account metadata is enough to enable targeted phishing attacks, account takeover attempts, and behavioral profiling of affected subscribers. Warner Bros. Discovery has not made detailed public statements about the scope of Max's specific exposure in this campaign. No regulatory actions or breach notifications have been publicly confirmed at this time. Affected individuals face an elevated risk of phishing emails and phone-based scams impersonating Max or Warner Bros. Discovery. Anyone with a Max account should treat unsolicited messages about billing, password resets, or account verification with caution and consider updating their login credentials as a precaution.

Streaming platforms collect user identity, subscription records, payment-adjacent data, device identifiers, viewing history, and household account activity across entertainment services.

Warner Bros. Discovery has been managing significant debt from the 2022 merger that created the company, executing cost-reduction programs and pursuing content strategy adjustments. The company has explored a potential merger with Paramount Global and has been restructuring its linear television holdings. Max itself has continued expanding its international streaming footprint.