A cybercriminal group known as Scattered LAPSUS$ Hunters has leaked millions of records stolen from multiple Salesforce customers, with Fujifilm among the affected companies. This group, linked to infamous hacking collectives like Lapsus$ and ShinyHunters, targeted organizations using Salesforce’s CRM platform in a widespread extortion campaign. Despite threats demanding ransom payments, Salesforce refused to comply, prompting the hackers to publish the stolen data on dark web and public websites. The leaked information reportedly includes sensitive details such as names, emails, phone numbers, birth dates, and loyalty program data.
Fujifilm has not yet commented on the breach, but the incident raises concerns about the security of customer data stored within Salesforce. Other impacted organizations include Qantas, Vietnam Airlines, and GAP. This breach underscores the importance for companies to strengthen cybersecurity defenses and closely monitor any suspicious activity related to their data.