TripleA (Partial) Breach

The incident is one of several breaches affecting Salesforce in 2025. A group calling itself "Scattered LAPSUS$ Hunters" released a limited sample of the stolen database on October 3, 2025. The records have since been indexed and anonymized in our search engine.

According to the attackers, the full dataset is scheduled for release on October 10, 2025.

Data found in hackers’ sample -

🧍 Personal Information

• First name - ✅ Present
• Last name - ✅ Present
• Full name - ✅ Present
• Gender - ⛔ Empty
• Date of birth - ✅ Present (in some records)
• Membership age / years with AAA - ✅ Present
• Marital status - ⛔ Empty

📧 Contact Information

• Email address - ✅ Present
• Phone number - ✅ Present
• Alternate / secondary phone - ⛔ Empty
• Mailing address (street, city, state, ZIP, country) - ✅ Present
• Alternate address - ⛔ Empty
• Country - ✅ Present

💳 Membership & Account Data

• Membership number - ✅ Present
• Membership level - ✅ Present (“Plus”, “Premier”, etc.)
• Membership status - ✅ Present (“Active”, “Prospect”)
• Membership type - ✅ Present (“Primary”, “Associate”, “Individual”)
• Membership club / branch name - ✅ Present
• Club code / region code - ✅ Present
• Years with AAA - ✅ Present
• Join date - ✅ Present
• Renewal / expiration date - ✅ Present
• Pay status - ✅ Present (“Active Member”)
• Prior club - ⛔ Empty
• VIP or special member type - ⛔ Empty

🏢 Corporate & Policy Data

• AAA credit card / membership ID - ✅ Present (membership numbers that resemble card format, not payment cards)
• Auto or life policy info - ⛔ Empty
• Billing / renewal priority - ✅ Present
• Outstanding balances / credit - ✅ Present (0.0 values)
• Entitlements used / allotted - ✅ Present (0.0 values)
• Bonus or dues amount - ⛔ Empty

💬 Marketing & Communication

• Email / SMS opt-in flags - ✅ Present (true/false)
• Do-not-call / do-not-mail flags - ✅ Present
• Preferred contact method - ⛔ Empty
• Preferred time to contact - ⛔ Empty

⚙️ System Metadata

• Record creation date - ✅ Present
• Last modified date - ✅ Present
• SystemModstamp - ✅ Present
• Owner / created by IDs - ✅ Present
• Account / member IDs - ✅ Present
• Renewal record timestamps - ✅ Present
• IsDeleted / IsPartner flags - ✅ Present (false)

🏠 Geographic & Club Data

• Club / branch name - ✅ Present
• Club code - ✅ Present
• State / region / country - ✅ Present
• Postal code - ✅ Present
• Address block (formatted HTML) - ✅ Present