Trinity of Chaos Group Exposes 1.5 Billion Records in Massive Data Breach
A cybersecurity group, dubbed the 'Trinity of Chaos', has caused significant disruption. The group, linked to Lapsus$, Scattered Spider, and ShinyHunters, has impacted 39 major companies, including Aeromexico, AirFrance, Google, and Qantas Airlines. They've launched a data leak site on the TOR network, exposing substantial amounts of sensitive personal information (PII).
The group's latest approach involves exploiting vulnerabilities in Salesforce instances. They've targeted these weaknesses to gain access to and leak sensitive data. The data leak site, last updated after October 10, contains over 1.5 billion records. The FBI has issued a flash warning to help organizations check if their Salesforce environments have been compromised.
The affected companies span various sectors, with the full extent of compromised data still being assessed. There are concerns that the stolen data could be misused in AI applications. The group continues to conduct coordinated hacks and extortion operations, demonstrating their evolving tactics.
The 'Trinity of Chaos' group has caused significant data breaches, impacting 39 major companies. Their shift to targeting Salesforce vulnerabilities has raised alarm, with the FBI issuing a warning. Organizations are urged to check their Salesforce environments and take necessary precautions to protect sensitive data.