A Cbassociations dataset indexed by leaksear.ch contains 2.36M Salesforce-derived records tied to Icarus extortion claims from June 22, 2026. Searchable data includes names, addresses, countries, IP addresses and usernames, giving defenders practical pivots for exposure checks.
A Gms-net leak indexed by leaksear.ch contains 31,249 Salesforce CRM records with contact and account-related fields. Public reporting ties the alleged Salesforce data theft to the ICARUS extortion group's June 2026 SaaS and CRM-focused activity.