Ransom amountNot disclosed
Data size exfiltratedNot disclosed
Screenshot on leak siteNo
Press mentioned by groupNo
Associated infostealer10 users · 6 third-parties · Generic Stealer, Lumma, Raccoon
Over 21 million Salesforce records containing some PII and 147GB+ of internal corporate data was compromised. This is a final warning to reach out by 4 August 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline.
AgoVictimCountrySectorSizeCap.
29dAlcon Inc.alcon.com
CHHealthcare—○Switzerland29dLumenis Ltd.lumenis.com
ILTechnology—○Israel