October 6, 2025 By Alessandro Mascellino
A new data leak site hosted on the TOR network has been launched by the “Trinity of Chaos” – a ransomware collective allegedly tied to the Lapsus$, Scattered Spider and ShinyHunters groups.
The site lists 39 major global companies, marking a significant escalation in the group’s cybercriminal operations, according to a report from Resecurity.
A New Phase in Ransomware Tactics
The Trinity of Chaos group has not claimed any fresh attacks but instead published previously undisclosed data from past breaches. Among those listed are Toyota, FedEx, Disney, UPS, Marriott and Google.
The collective has also threatened Salesforce after exploiting vulnerabilities in its environment, claiming to possess massive amounts of corporate data. Salesforce has dismissed the claim, stating no new vulnerabilities exist, though it acknowledged that prior breaches could have compromised customer data.
