TLDR InfoSec · ATTACKS & VULNERABILITIES
HACKERS LEAK 2.8M SENSITIVE RECORDS FROM ALLIANZ LIFE IN SALESFORCE DATA BREACH
Summary from the TLDR InfoSec newsletter
Threat actors linked to ShinyHunters have leaked 2.8 million records from Allianz Life's Salesforce CRM, exposing personal details including names, addresses, birth dates, and Tax IDs of customers and business partners. The July 16 breach occurred through social engineering attacks targeting the third-party cloud CRM system, affecting the majority of Allianz Life's 1.4 million customers. The attackers have formed a joint Telegram channel with other groups, including Scattered Spider and Lapsus$, to claim credit for this and other major Salesforce-related breaches.