Blog

A May 2026 Baker Distributing leak exposed nearly 254,000 indexed records tied to Salesforce and SharePoint data. The data includes customer and employee contact details, support-ticket information, and internal account metadata that can fuel targeted phishing and fraud.

An Alert 360 dataset indexed by leaksear.ch contains 1,905,385 records tied to customer, dealer, and CRM data. The records include names, emails, phones, addresses, dates of birth, usernames, and account-related context.

A Gap Inc. Salesforce dataset indexed by leaksear.ch contains 271,049 user records with names, usernames, emails, phone numbers, addresses, countries, and dates of birth. Public reporting ties Gap to the October 2025 ShinyHunters and Scattered Lapsus$ Hunters Salesforce extortion leak site.

A Salesforce-linked Engie Resources dataset indexed by leaksear.ch contains 449,645 records, including names, emails, phones, addresses, dates of birth, usernames, IP addresses, and account data. Public reporting tied Engie Resources to the Scattered LAPSUS$ Hunters/ShinyHunters Salesforce extortion leaks.

A dataset tied to Albertsons Companies contains 623,796 Salesforce CRM records with customer contact details. Public reporting places the leak in the Scattered LAPSUS$ Hunters Salesforce extortion wave, while the specific Albertsons incident remains publicly reported as alleged.

Qantas customer data from a July 2025 third-party platform breach has been indexed by leaksear.ch at more than 11 million records. The exposed data includes names, emails, phones, dates of birth and loyalty-related customer details.

A May 2026 Cushman & Wakefield leak tied to ShinyHunters exposed Salesforce CRM data later indexed by leaksear.ch. The records include business-contact and identity fields that can support targeted phishing and account-recovery abuse.