Blog

A Hitachi Vantara Salesforce CRM export indexed by leaksear.ch contains 2.3 million records tied to contacts, leads, users, cases and account-contact data. The dataset includes names, emails, phone numbers, addresses, usernames and CRM metadata, and is associated in metadata with the 2025 Salesforce customer data-theft and extortion wave.

A Cbassociations dataset indexed by leaksear.ch contains 2.36M Salesforce-derived records tied to Icarus extortion claims from June 22, 2026. Searchable data includes names, addresses, countries, IP addresses and usernames, giving defenders practical pivots for exposure checks.

A Gms-net leak indexed by leaksear.ch contains 31,249 Salesforce CRM records with contact and account-related fields. Public reporting ties the alleged Salesforce data theft to the ICARUS extortion group's June 2026 SaaS and CRM-focused activity.

A June 2026 American Tower leak indexed by leaksear.ch contains 212,642 records with names, emails, phone numbers, physical addresses and job titles. Public breach listings tie the incident to a ShinyHunters pay-or-leak campaign, while the initial access vector has not been publicly confirmed.

A Ralph Lauren dataset tied to a June 2026 ShinyHunters pay-or-leak incident contains 140,178 indexed records. Exposed data includes email addresses, names, phone numbers, country, gender, age group, and transaction or survey context.

Madison Square Garden Sports was hit in a June 2026 ShinyHunters extortion campaign, with leaksear.ch indexing 9,796,326 records. The data includes names, email addresses, phone numbers, physical addresses, dates of birth, usernames, and CRM or support details tied to customers and staff.

A June 2026 Nexstar Media Group Salesforce leak indexed by leaksear.ch contains 14,600 person-level CRM records. Public reporting tied the incident to a ShinyHunters extortion claim, while Nexstar's own confirmation and the full compromise path remain unclear.