A sprawling cybercrime campaign has reportedly swept across global companies using Salesforce’s cloud platforms, with hackers claiming to have stolen close to a billion customer records. The alleged breach — and a newly patched vulnerability in Salesforce’s AI-driven services — is raising fresh questions about how insurers and their clients should assess and price cyber risk.
A New Leak Site Targets Victims
On Friday, a group calling itself Scattered LAPSUS$ Hunters unveiled a dark-web site that listed dozens of prominent companies as victims. The hackers, who have operated under names including ShinyHunters, Scattered Spider, and Lapsus$, warned firms to pay up or see their stolen Salesforce data dumped online.
“Contact us to regain control on data governance and prevent public disclos