Toyota (Partial) Breach

The incident is one of several breaches affecting Salesforce in 2025. A group calling itself "Scattered LAPSUS$ Hunters" released a limited sample of the stolen database on October 3, 2025. The records have since been indexed and anonymized in our search engine.

According to the attackers, the full dataset is scheduled for release on October 10, 2025.

Data found in hackers’ sample -

🧍 Personal Information

• Full name - ✅ Present
• Date of birth / age - ⛔ Empty
• Gender - ⛔ Empty
• Nationality - ✅ Present

🪪 Identification Data

• Customer ID number - ✅ Present
• Record type (Individual / business) - ✅ Present
• Other internal IDs - ⛔ Empty

📧 Contact Information

• Email address - ✅ Present
• Home phone number - ✅ Present
• Mobile phone number - ⛔ Empty
• Fax number - ⛔ Empty
• Alternate or secondary phone - ⛔ Empty

🏠 Address / Location Data

• Street address - ✅ Present
• City, state, ZIP code - ✅ Present
• Country - ✅ Present
• Latitude / longitude - ⛔ Empty
• Alternate / “Other” address fields - ⛔ Empty

💳 Account & Loyalty Data

• Customer status (active/inactive) - ✅ Present
• Loyalty score - ⛔ Empty
• Toyota.com user status - ✅ Present
• Goodwill / compensation offered - ⛔ Empty

💬 Marketing & Consent Records

• Email / call / fax opt-out flags - ✅ Present (all false)
• Delete right executed - ✅ Present (false)
• Opt-out right executed - ✅ Present (false)
• Attorney involved - ✅ Present (false)
• Lead source - ✅ Present
• Social media fields - ⛔ Empty

⚙️ System Metadata

• Record creation date - ✅ Present
• Last modified date - ✅ Present
• System timestamps (login, authentication) - ✅ Present
• Salesforce / CRM record IDs - ✅ Present
• Region and distributor code - ✅ Present
• Owner and reporting fields - ⛔ Empty

🔗 Cross-System References

• External system IDs (e.g., Siebel, Jigsaw) - ⛔ Empty
• Integration flags - ⛔ Empty

⚖️ Privacy & Legal Fields

• Delete right, opt-out, and attorney flags - ✅ Present (all false)
• Data rights request fields - ✅ Present