LAPSUS$ Group Breaches Salesfloor Exposing 4TB of Retail Data

The LAPSUS group claims to have breached Salesfloor and exfiltrated roughly 1TB compressed (about 4TB uncompressed) of internal and client data, including source code, SQL databases, system logs, user images, and customer PII. The actor alleges files contain data from multiple high-profile retail clients such as Fabletics, GNC, Puma India, and Novartis, potentially exposing names, emails, phone numbers, CRM IDs, and subscription flags. #LAPSUS #Salesfloor #Fabletics #GNC #PumaIndia #Novartis

Keypoints

LAPSUS claims to have breached Salesfloor and stolen approximately 1TB compressed (4TB uncompressed) of data.
The allegedly exfiltrated materials include full source code, development data, and SQL database files.
Compromised items reportedly also contain system logs, user images, and other internal assets.
Customer PII such as full names, email addresses, and phone numbers were reportedly included.
High-profile retail clients named as affected include Fabletics, GNC, Puma India, and Novartis, with CRM IDs and subscription flags exposed.