Saksfifth (Partial) Breach

The incident is one of several breaches affecting Salesforce in 2025. A group calling itself "Scattered LAPSUS$ Hunters" released a limited sample of the stolen database on October 3, 2025. The records have since been indexed and anonymized in our search engine.

According to the attackers, the full dataset is scheduled for release on October 10, 2025.

Data found in hackers’ sample -

🧍 Personal Information

• Full name - ✅ Present
• Gender - ⛔ Empty
• Birthdate - ⛔ Empty
• Title / salutation - ⛔ Empty

📧 Contact Information

• Email address - ✅ Present
• Phone number - ✅ Present
• Alternate phone - ⛔ Empty
• Mailing / billing address - ✅ Present (partial: state and country filled)
• Shipping address - ✅ Present (street, city, state, ZIP, country filled)
• Country - ✅ Present (“United States”)
• Latitude / longitude - ⛔ Empty

🏢 Account & Customer Data

• Account name - ✅ Present
• Account type - ✅ Present (“Customer”)
• Industry - ✅ Present (“Retail”)
• Website - ✅ Present (“saks”)
• Number of employees - ✅ Present (1)
• Description / notes - ✅ Present (“return and ordering an item online”)
• Account ID / CRM record type - ✅ Present (Salesforce record)

💬 Marketing & Communication

• Opt-in / opt-out flags - ⛔ Empty
• Portal / self-service flag - ✅ Present (false)
• Customer feedback / return context - ✅ Present (in description field)

⚙️ System Metadata

• Record creation date - ✅ Present
• Last modified date - ✅ Present
• SystemModstamp - ✅ Present
• Last activity date - ✅ Present
• IsCustomerPortal - ✅ Present (false)