Scattered Lapsus$ Hunters
ObscureIQ Threat Intelligence · Actor Profile
Scattered Lapsus$ HuntersConfidence: Medium-High
Collective / brand · coalition / brand fusion
Motivation: Financial; Notoriety
41Attributed Breaches Circulating
Medium-HighAttribution Confidence
Collective / brandActor Type
Part of the Members: Scattered Spider, LAPSUS$, ShinyHunters coalition. Coalition breaches are tracked once on the coalition profile and cross-referenced here.
Overview
A 2025 claimed fusion of Scattered Spider, LAPSUS$, and ShinyHunters branding, using Telegram and forum channels for threats, leak theatrics, and extortion pressure against SaaS, identity systems, and enterprise data. Treat shutdown and membership claims skeptically unless tied to specific operators or infrastructure.
Tactics, Targeting & TTPs
Status: unstable. Targeting: SaaS, identity systems, enterprise data.
Related Clusters & Actors
LAPSUS$Scattered SpiderShinyHunters
Source
Attribution draws on public threat-intelligence reporting · Established (multi-source). Primary source →
Were you exposed in one of these breaches?
Check your exposure privately, or request a tailored exposure audit.