Archive — US — techcrunch
Hacking group claims theft of 1 billion records from Salesforce customerdatabases
The hacking group ShinyHunters claims to have stolen 1 billion records from Salesforce-hosted databases and launched a data leak site to extort victims. Numerous companies, including Allianz, Google, and Qantas, confirm hacks. Salesforce states no indication of a compromise on their platform. The group threatens to publish stolen data unless ransoms are paid, indicating a shift in cybercrime tactics.
Key points
- ShinyHunters claims to have stolen 1 billion customer records from various companies using Salesforce cloud databases.
- The group launched a dark web site to extort companies, demanding ransom to prevent data publication.
- Victims confirmed include major firms like Allianz Life, Google, and Qantas, but many have not publicly commented.
- Salesforce denies any compromise in their security and states the incident relates to past issues.
- This hacking method marks a shift in cybercrime from ransomware demands to public data threats.
Why it matters
- This incident exemplifies ongoing trends in cybersecurity threats where extortion tactics are evolving, notably among hacktivist groups.
- Similar extortion tactics have been seen previously with ransomware groups, indicating a possible trend towards public pressure to pay ransoms.
- The growing integration of cloud technology in businesses increases vulnerabilities, as evident from this widespread data breach impacting numerous high-profile enterprises.
The ShinyHunters’ massive data theft from Salesforce users highlights significant vulnerabilities in cloud database security and illustrates a concerning shift in tactics among hacking groups, placing increased pressure on organizations to enhance their cybersecurity measures.