HBO Max (Partial) Breach

The incident is one of several breaches affecting Salesforce in 2025. A group calling itself "Scattered LAPSUS$ Hunters" released a limited sample of the stolen database on October 3, 2025. The records have since been indexed and anonymized in our search engine.

According to the attackers, the full dataset is scheduled for release on October 10, 2025.

Data found in hackers’ sample - HBO Max customer records

🧍 Personal Information

• First name - ✅ Present
• Last name - ✅ Present
• Middle name - ⛔ Empty
• Salutation / suffix - ⛔ Empty
• Gender - ⛔ Empty
• Birth date / age - ⛔ Empty

📧 Contact Information

• Email address - ✅ Present
• Mobile or main phone - ✅ Present (appears in many rows)
• Street address - ✅ Present (partial; some ZIPs and cities)
• City - ✅ Present (intermittent)
• State - ⛔ Empty
• Postal code - ✅ Present (several rows)
• Country - ✅ Present (“US” / “USA”)

💬 Marketing & Subscription Data

• Market / region field - ✅ Present (intermittent, e.g. “US”)
• Auto-response / survey flags - ✅ Present (most false or empty)
• Special initiative / VIP flag - ⛔ Empty
• Bulk email / opt-in status - ✅ Present (fields exist with false values)

⚙️ System Metadata

• Record creation date - ✅ Present (e.g. May-July 2021 timestamps)
• Last modified / activity date - ✅ Present
• System modstamp / view fields - ✅ Present
• Flags (IsDeleted, IsPersonAccount, IsPriorityRecord) - ✅ Present (most false)
• Country code / ISO fields - ✅ Present (“US”)

🏢 Account / Corporate Fields

• Account source - ⛔ Empty
• Industry / type - ⛔ Empty
• Company / parent ID - ⛔ Empty