The threat actor channel ‘scattered LAPSUS$ hunters 5.0’ has resurfaced on Telegram, announcing its return with messages like “we back boysssssssssssssssssss”. Operators of the channel announced the impending launch of a new data leak site (DLS), with a pinned message stating, “DLS coming within the next 48 hours”. Within their communications, group members taunted international law enforcement agencies, including the NCA, Europol, and the FBI.
The group has made numerous claims about possessing data from high-profile corporate victims. Within the channel, members attributed specific attacks to certain aliases, such as a claim that “Pinball hacked Salesforce”. The actors alluded to breaches at multiple major corporations, including:
- The Home Depot (allegedly 40 million+ records)
- Harrods (allegedly 430,000 records)
- T-Mobile
- Salesforce
- Verizon
- Tata Motors
