Disclosed Aug 5, 2025Unverified
ShinyHunters steal business contact data from Google Salesforce instance
Google said one of its Salesforce systems storing contact details and notes for small and medium businesses was breached by UNC6040 (ShinyHunters); the data was basic, largely public business names and contact details.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Aug 5, 2025 |
| Attack | Phishing |
| Data exposed | NamesPhone numbersOther |
| Sector | Tech · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Part of | Salesforce (2025) |
Sources
Notices filed
Same campaign
Other breaches at Google
Gemini accessed three real companies' systems during Irregular security testsAI or model exposed credentials and tokens.AI or modelTechUSUnverifiedSep 16Ex-engineer stole 2,000+ pages of AI supercomputing trade secrets for ChinaInsider exposed internal documents and source code.InsiderTechUSMar 6, 2024Shared Bard conversations were indexed in Google Search resultsExposed data exposed prompts and chats and messages.Exposed dataTechUSUnverifiedSep 27, 2023Second Google+ API bug affected about 52.5 million usersExposed data exposed names, emails and employment records.Exposed data53M affectedTechUSDec 10, 2018Google+ API bug exposed profile data of up to 500,000 usersExposed data exposed names, emails and employment records.Exposed data500K affectedTechUSOct 8, 2018Breach, details not statedBreach notice filed with the California AG, details not stated.TechUSMay 6, 2016
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.