Story perspectives

FBI Takes Down BreachForums, Salesforce Data Leak Averted

10/14/2025

Summary

Story summary

The Federal Bureau of Investigation (FBI), in collaboration with French authorities, dismantled BreachForums just before Scattered Spider planned to leak Salesforce data.
The seizure also included the domain used by the ShinyHunters group, which had threatened to publish sensitive information.
Scattered Spider vowed to continue its campaign, claiming it still possesses over one billion records.
Salesforce said it would not pay any ransom and attributed the breach to a compromised third-party platform, Salesloft.

History

Historical Context

The FBI seized the Silk Road in October 2013, arresting founder Ross Ulbricht, who facilitated over $1.2 billion in illegal transactions. This marked a significant crackdown on dark web marketplaces. The recent dismantling of BreachForums echoes this effort, as organizations like Salesforce adapt their cybersecurity strategies to combat ongoing threats from cybercriminals, including groups like Scattered Spider.

1 of 2

Story summary

The Federal Bureau of Investigation (FBI), in collaboration with French authorities, dismantled BreachForums just before Scattered Spider planned to leak Salesforce data.
The seizure also included the domain used by the ShinyHunters group, which had threatened to publish sensitive information.
Scattered Spider vowed to continue its campaign, claiming it still possesses over one billion records.
Salesforce said it would not pay any ransom and attributed the breach to a compromised third-party platform, Salesloft.

1 / 2