Hackers associated with groups like ShinyHunters, Scattered Spider, and Lapsus$ have stolen and leaked sensitive data from Allianz Life’s Salesforce database, affecting millions of records. This cyberattack highlights the increasing sophistication of social engineering and SaaS-targeted breaches, with threat actors taunting law enforcement and researchers. #ShinyHunters #ScatteredSpider
Keypoints
- Cybercriminal groups like ShinyHunters, Scattered Spider, and Lapsus$ have carried out high-profile Salesforce data thefts.
- The attack on Allianz Life involved stealing 2.8 million records containing personal and professional data.
- Threat actors used social engineering to trick employees into linking malicious OAuth apps to access data.
- These groups are known to target cloud SaaS applications and have roots in earlier hacking collectives.
- The theft exposes sensitive information such as names, addresses, tax IDs, and licenses, risking identity theft and fraud.