McDonalds (Partial) Breach

The incident is one of several breaches affecting Salesforce in 2025. A group calling itself "Scattered LAPSUS$ Hunters" released a limited sample of the stolen database on October 3, 2025. The records have since been indexed and anonymized in our search engine.

According to the attackers, the full dataset is scheduled for release on October 10, 2025.

Data found in hackers’ sample -

🧍 Personal Information

• Full name - ✅ Present
• Record type (person account) - ✅ Present
• Gender - ⛔ Empty
• Birthdate - ⛔ Empty
• Age - ⛔ Empty

📧 Contact Information

• Email address - ✅ Present
• Home phone number - ✅ Present
• Alternate phone (formatted variation) - ✅ Present
• Mailing address - ✅ Present
• City - ✅ Present
• State / province - ✅ Present
• ZIP / postal code - ✅ Present
• Country - ✅ Present

💳 Account & Loyalty Data

• Loyalty / contact number - ✅ Present (GPM_Contact_Number__pc and GPM_Contact_Number__c)
• Loyalty email - ⛔ Empty
• Address for Chabot Locator (McDonald’s store locator system) - ✅ Present (“None of the above”)

⚙️ System Metadata

• Record ID - ✅ Present
• Created date - ✅ Present
• Modified date - ✅ Present
• SystemModstamp - ✅ Present
• Record type ID - ✅ Present
• Owner ID - ✅ Present
• Created by / last modified by - ✅ Present
• Photo URL - ✅ Present