TLDR InfoSec · ATTACKS & VULNERABILITIES

SALESFORCE SAYS IT WON'T PAY EXTORTION DEMAND IN 1 BILLION RECORDS BREACH

arstechnica.com3 min read

Summary from the TLDR InfoSec newsletter

Salesforce has refused to pay a crime group calling itself Scattered LAPSUS$ Hunters, which claims to have stolen about 1 billion records from major clients. The hackers used social engineering to breach Salesforce portals and threatened to leak customer data unless paid.