Skip to content
Submit incident
DII-2025-00339
ReportedReported by fewer than three independent publishers, with no official finding.

Developing: Salesforce data leak site being seized? Looks like it.

I am guessing that the breachforums[.]hn leak site for ScatteredLAPSUS$Hunters is in the process of being seized. A whois lookup now shows that the name servers have been changed to hans.ns.cloudflare.com and...

6 October 2025 · Ransomware and extortion
6 October 2025
DII-2025-00339View source ↗
Quick facts
Category
Ransomware and extortion
Source
DataBreaches.net
Date
6 October 2025
Drafted by
Raidu Incident Detection

What happened

Not publicly disclosed.

Classification

Category
Ransomware and extortion

Sources and evidence

This record was researched and written by the Index, based on the following original reporting.

DataBreaches.net
Developing: Salesforce data leak site being seized? Looks like it.
6 October 2025