Salesforce Defies Cybercriminals, Rejects Extortion After Massive Data Breach
Ars Technica
|
Contributed by: Drex DeFord
Summary
Salesforce has publicly rejected an extortion demand from the Scattered LAPSUS$ Hunters, a criminal group that claims to have stolen around 1 billion records from Salesforce customers, including major companies like Toyota and FedEx. This syndicate, identified by security researchers as a coalition of three previously known data-extortion groups, has exploited social engineering tactics to gain access to Salesforce portals through deceptive voice calls. The incident underscores the escalating threat of sophisticated cyberattacks in healthcare technology, emphasizing the need for robust security measures and heightened awareness among organizations using digital platforms to protect sensitive patient data. As Salesforce and its clients grapple with the repercussions of this breach, it highlights the critical importance of cybersecurity readiness in the healthcare sector.