Air France-KLM (Partial) Breach

The incident is one of several breaches affecting Salesforce in 2025. A group calling itself "Scattered LAPSUS$ Hunters" released a limited sample of the stolen database on October 3, 2025. The records have since been indexed and anonymized in our search engine.

According to the attackers, the full dataset is scheduled for release on October 10, 2025.

Data found in hackers’ sample - Air France-KLM customer records

🧍 Personal Information

• Full name - ✅ Present
• First / last names - ✅ Present
• Salutation / title - ✅ Present (“Ms”)
• Gender - ⛔ Empty
• Birthdate - ⛔ Empty
• Country of residence - ✅ Present
• Loyalty tier - ✅ Present (“Explorer”)
• Loyalty number - ✅ Present (“Flying Blue Number”)

📧 Contact Information

• Primary email address - ✅ Present
• Alternate / additional email - ✅ Present
• Mobile phone - ✅ Present
• Landline / office phone - ✅ Present
• Assistant name - ✅ Present
• Assistant phone - ✅ Present
• Address / mailing info - ⛔ Empty (no street or city in sample)

💳 Account & Loyalty Data

• Account name - ✅ Present
• Account / customer ID - ✅ Present
• Flying Blue loyalty number - ✅ Present
• GIN (global customer identifier) - ✅ Present
• Tier level - ✅ Present (“Explorer”)
• Status flags (VIP, restricted, deleted, duplicate, purge) - ✅ Present (all false)
• Internal notes / descriptions - ✅ Present (summary, remarks, additional description)
• Agent or office code - ✅ Present (“KLM_AMS”)
• Account type - ✅ Present (“PersonAccount”)

💬 Marketing & Communication

• VIP flag - ✅ Present (false)
• Personal assistance flag - ✅ Present (false)
• Temporary email contact flag - ✅ Present (false)
• Opt-in / opt-out preferences - ⛔ Empty
• Marketing summary / remarks - ✅ Present (“Internal Customer”, “Yes”)

⚙️ System Metadata

• Record IDs - ✅ Present
• Created date - ✅ Present
• Last modified date - ✅ Present
• SystemModstamp - ✅ Present
• Record type IDs - ✅ Present
• Owner / created by / modified by IDs - ✅ Present
• IsDeleted flag - ✅ Present (false)
• Account / contact relationship IDs - ✅ Present