cyber.hendryadrian.com
Ransom Monitor · ransomware.live

Icarus Claims Theft of Gms-net Salesforce Data

· Original article ↗

Summary

A ransomware.live record attributes to Icarus an unconfirmed claim that Salesforce data belonging to Gms-net was stolen and exfiltrated in compressed form.

Key points

  • The record identifies Gms-net as the alleged victim and Icarus as the actor.
  • Icarus is attributed with claiming that Salesforce data for the organization was stolen.
  • The post says the data was exfiltrated in compressed form.
  • The monitoring post states that it cannot confirm the claim's accuracy.

Article Details

Victim
Gms-net
Victim Domain
Unknown
Attack Date
2026-06-22
Claim Date
2026-06-22
Encryption Status
Not disclosed
Encrypted Size
Not disclosed
Exfiltration Status
Claimed; unverified
Exfiltrated Data
Compressed Salesforce data, according to the public claim
Exfiltrated Size
Not disclosed
Ransom Demand
Not disclosed
Leak Status
Not disclosed

Threat Actors

IcarusIdentified as the ransomware group making the public claim about data theft; the source says it cannot confirm the claim's accuracy.

Products

SalesforceGms-net reported a ransomware incident involving data theft from Salesforce, where SF data was exfiltrated in compressed form.

Industries

TechnologySector: Technology

Related Articles