A threat actor has claimed responsibility for a data breach impacting SAS Institute (SAS). SAS is an American multinational corporation specializing in integrated business analytics software, artificial intelligence (AI), and data management.
The actor announced the breach on a dark web forum, stating the incident occurred in November 2025 and resulted in the theft of source code and internal tools.
According to the actor, the allegedly compromised data includes:
-
Source code
-
Internal tools
-
Directory structure












