Marriott (Partial) Breach

The incident is one of several breaches affecting Salesforce in 2025. A group calling itself "Scattered LAPSUS$ Hunters" released a limited sample of the stolen database on October 3, 2025. The records have since been indexed and anonymized in our search engine.

According to the attackers, the full dataset is scheduled for release on October 10, 2025.

Data found in hackers’ sample -

🧍 Personal Information

• Full name - ✅ Present
• Gender - ✅ Present
• Date of birth (day and month only) - ✅ Present
• Age - ⛔ Empty
• Nationality - ⛔ Empty
• Language - ✅ Present
• Preferred or calling name - ✅ Present
• Title / salutation - ⛔ Empty

📧 Contact Information

• Email address - ✅ Present
• Mobile phone number - ✅ Present
• Mobile country code - ✅ Present
• Verified mobile / email flags - ✅ Present (fields exist)
• Alternate phone numbers - ⛔ Empty
• Physical address - ⛔ Empty

💳 Account & Loyalty Data

• Internal CRM customer ID - ✅ Present
• Loyalty or membership card type - ✅ Present
• Revenue center or program ID - ✅ Present
• Merchant and purchase tracking fields - ✅ Present
• Corporate / employee linkage field - ✅ Present
• Account activation status - ✅ Present
• Account type (customer vs. person account) - ✅ Present
• Birthday-related fields (month, day, formatted text) - ✅ Present

💬 Marketing & Consent Records

• Marketing opt-in flag - ✅ Present
• Data source (lead origin) - ✅ Present
• Preferred communication methods - ✅ Present (e.g., email, phone, SMS)
• Email verified flag - ✅ Present
• Mobile verified flag - ✅ Present
• Email bounce tracking - ⛔ Empty

⚙️ System Metadata

• Record creation and modification timestamps - ✅ Present
• Record owner and creator IDs - ✅ Present
• System synchronization timestamp - ✅ Present
• Currency code - ✅ Present
• Record type and internal flags - ✅ Present
• Portal and priority status flags - ✅ Present

📲 Security & Verification Data

• Token and OTP verification fields - ✅ Present
• Email and mobile change / reset timestamps - ✅ Present
• PIN reset and verification counters - ✅ Present
• Forget PIN and validation log fields - ✅ Present

⚖️ Privacy & Legal Fields

• Marketing consent records - ✅ Present
• Forget / opt-out event flags - ✅ Present
• Data rights request fields - ⛔ Empty