Salesforce Stands Firm: No Ransom for Data Thieves, Cybercriminals Foiled!
Salesforce is standing firm against cyber extortion, refusing to pay ransom for data theft attacks impacting its customers. Despite threats from “Scattered Lapsus$ Hunters” to leak nearly a billion stolen records, the company remains unyielding, urging others not to cave in to the cybercriminals’ demands.

Hot Take:
Looks like the Scattered Lapsus$ Hunters tried to play hardball with Salesforce, but the tech giant decided to play a different game altogether—dodgeball! No ransom for you, hackers! Meanwhile, the FBI seems to have swooped in with some digital duct tape, leaving the threat actors looking like a bunch of cyber-ghosts haunting an empty domain.
Key Points:
- Salesforce refuses to negotiate or pay ransom to Scattered Lapsus$ Hunters.
- Threat actors launched a data leak site on breachforums[.]hn to extort companies.
- Nearly 1 billion data records were stolen from Salesforce instances in 2025.
- Social engineering and OAuth token theft were the main methods of attack.
- Data leak site has been shut down, possibly seized by the FBI.
Already a member? Log in here