Salesforce Says It Won't Pay Extortion Demand in 1 Billion Records Breach

Salesforce says it's refusing to pay an extortion demand made by a crime syndicate that claims to have stolen roughly 1 billion records from dozens of Salesforce customers. From a report: The threat group making the demands began their campaign in May, when they made voice calls to organizations storing data on the Salesforce platform, Google-owned Mandiant said in June. The English-speaking callers would provide a pretense that necessitated the target connect an attacker-controlled app to their Salesforce portal. Amazingly -- but not surprisingly -- many of the people who received the calls complied.

Earlier this month, the group created a website that named Toyota, FedEx, and 37 other Salesforce customers whose data was stolen in the campaign. In all, the number of records recovered, Scattered LAPSUS$ Hunters claimed, was '989.45m/~1B+.' The site called on Salesforce to begin negotiations for a ransom amount 'or all your customers [sic] data will be leaked.' The site went on to say: 'Nobody else will have to pay us, if you pay, Salesforce, Inc.' The site said the deadline for payment was Friday.

Read more of this story at Slashdot.