Walgreens (Partial) Breach

The incident is one of several breaches affecting Salesforce in 2025. A group calling itself "Scattered LAPSUS$ Hunters" released a limited sample of the stolen database on October 3, 2025. The records have since been indexed and anonymized in our search engine.

According to the attackers, the full dataset is scheduled for release on October 10, 2025.

Data found in hackers’ sample -

🧍 Personal Information

• Full name - ✅ Present
• Birthdate - ✅ Present
• Age (calculated) - ✅ Present
• Contact record type (“Patient”) - ✅ Present

📧 Contact Information

• Phone number - ✅ Present

🏠 Address / Location

• Mailing city - ✅ Present
• Mailing state - ✅ Present
• Mailing street - ⛔ Empty
• Display address field - ✅ Present

💳 Account / Loyalty & Balances

• Accumulated balance points - ⛔ Empty (value recorded)
• Accumulated goodwill - ⛔ Empty

📨 Surveys / NPS (Medallia)

• Completed survey count - ✅ Present (value recorded)
• Promoter count - ✅ Present (value recorded)
• Detractor count - ✅ Present (value recorded)
• Sum of scores - ✅ Present (value recorded)
• NPS score - ⛔ Empty

⚙️ System Metadata

• Contact ID - ✅ Present
• Account ID - ✅ Present
• Record type ID - ✅ Present
• Owner ID - ✅ Present
• Created date / by - ✅ Present
• Last modified date / by - ✅ Present
• SystemModstamp - ✅ Present
• Photo URL - ✅ Present