Salesforce
Data Breach on October 06, 2025
| Data Breach Report | |||
|---|---|---|---|
| Victim | salesforce.com | ||
| Threat Actor | ScatteredLAPSUSHunters | ||
| Date Discovered | Oct 06, 2025 | ||
| Description | Salesforce is a cloud-based software company based in the USA, specializing in customer relationship management (CRM) solutions, enterprise software, and cloud computing services. | ||
| Leak Size | Unknown |
Credential Exposure for salesforce.com
We've indexed 23,182 @salesforce.com accounts from external breaches, plus 94,581 credentials for salesforce.com itself.
Last checked Aug 16, 2026
| @salesforce.com addresses from external breaches | |
|---|---|
| Combo lists | 14,332 accounts · most recent Aug 15, 2026 |
| Third-party breaches | 9,876 accounts · across 497 breaches · 8,453 with a plaintext password · most recent Mar 22, 2026 |
| Phishing pages | 36 accounts · most recent Aug 13, 2026 |
| Passwords for salesforce.com accounts | |
|---|---|
| Infostealer logs | 48,773 logins · 18,339 infected devices · most recent Aug 8, 2026 |
| Combo lists | 47,840 logins · most recent Aug 15, 2026 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
Salesforce was breached. Check if your company's credentials have been exposed in this or other data breaches.
Check your exposure →Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.