Blog

A Gap Inc. Salesforce dataset indexed by leaksear.ch contains 271,049 user records with names, usernames, emails, phone numbers, addresses, countries, and dates of birth. Public reporting ties Gap to the October 2025 ShinyHunters and Scattered Lapsus$ Hunters Salesforce extortion leak site.

A Salesforce-linked Engie Resources dataset indexed by leaksear.ch contains 449,645 records, including names, emails, phones, addresses, dates of birth, usernames, IP addresses, and account data. Public reporting tied Engie Resources to the Scattered LAPSUS$ Hunters/ShinyHunters Salesforce extortion leaks.

A dataset tied to Albertsons Companies contains 623,796 Salesforce CRM records with customer contact details. Public reporting places the leak in the Scattered LAPSUS$ Hunters Salesforce extortion wave, while the specific Albertsons incident remains publicly reported as alleged.

Qantas customer data from a July 2025 third-party platform breach has been indexed by leaksear.ch at more than 11 million records. The exposed data includes names, emails, phones, dates of birth and loyalty-related customer details.

A Ticketmaster dataset indexed by leaksear.ch contains 928,546 customer order records tied to the May 2024 Snowflake-related breach. The records include contact details, IP addresses, masked payment-card metadata, and event, venue, and ticket information.

A ShunFeng/SF Express dataset indexed by leaksear.ch contains 125.7 million Chinese courier customer records with recipient names, phone numbers, and full shipping addresses. The dataset is described as allegedly stolen in 2020 and offered on BreachForums, creating phishing and address-fraud risk for affected recipients.

A May 2026 Cushman & Wakefield leak tied to ShinyHunters exposed Salesforce CRM data later indexed by leaksear.ch. The records include business-contact and identity fields that can support targeted phishing and account-recovery abuse.