Threat Group Profile
lapsus$
● Active — last 30 days
Victim claims
7
First seen
Apr 2026
Last activity
23 Jun 2026
Tracked since
Mar 2026
Group overview
Lapsus$ is an internationally composed data extortion group most active from mid-2021 through 2022, executing high-profile breaches against Microsoft, Nvidia, Samsung, Okta, and Uber by stealing source code and threatening leaks rather than encrypting files; several members — predominantly teenagers — were arrested in the UK.
Preferred targets
Financial Services · 2
Technology · 2
Consumer Services · 1
Telecommunication · 1
Business Services · 1
Most targeted countries
US · 3
MM · 1
SE · 1
DE · 1
ES · 1
