A hacking group that recently disclosed personal information on hundreds of government employees, including those from the Department of Homeland Security (DHS) and Immigration and Customs Enforcement (ICE), has compiled personal dossiers on tens of thousands of U.S. officials. According to a member of the group, these targeted individuals now include employees of the National Security Agency (NSA). The group member told 404 Media that they achieved this massive data collection by searching through caches of stolen Salesforce customer data. The publication was able to verify samples of this claimed information.
The group provided 404 Media with personal data on officials from an array of sensitive and regulatory agencies beyond the NSA. This roster of targeted employees includes those from the Defense Intelligence Agency (DIA), the Federal Trade Commission (FTC), the Federal Aviation Administration (FAA), and the Centers for Disease Control and Prevention (CDC). The hackers also obtained data for individuals at the Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) and members of the Air Force, among several other federal bodies.
This news comes shortly after the Telegram channel for the group, called Scattered LAPSUS$ Hunters, went offline following their widely publicized doxing of DHS officials and a specific NSA employee. The scale of the new claims sheds further light on the extensive and highly sensitive data potentially compromised from Salesforce customers during a series of breaches that occurred earlier this year, for which Scattered LAPSUS$ Hunters has reportedly attempted to extort the company.
The group member confirmed the scope of the theft, stating that this is how they are “pulling thousands of gov [government] employee records.” They claimed to have collected over 2,000 personal records specific to NSA officials. In total, the hacking group says they have obtained private, personal data on more than 22,000 government officials.
While the hackers have previously posted the DHS and Department of Justice (DOJ) data, this more extensive list of officials does not appear to have been made public yet. When contacted for comment, the FTC and Air Force declined to provide a statement. Most other agencies did not immediately respond to inquiries. Neither Salesforce nor DHS has responded to multiple requests for comment on the matter.
Reference:
