Technical

Srinivasa Reddy Kandi: CrowdStrike Fires Insider Accused of Leaking Information to Hacker Collective

November, 22, 2025-04:03

Share: Facebook | Twitter | Whatsapp | Linkedin | Visits: 37453 | :2821

---

CrowdStrike Fires Insider Accused of Leaking Information to Hacker Collective

Cybersecurity leader CrowdStrike has confirmed that it terminated a “suspicious insider” last month for allegedly sharing internal information with a well-known hacker group.
The collective — known as Scattered Lapsus$ Hunters — posted screenshots on its public Telegram channel late Thursday and Friday, claiming to have insider access to CrowdStrike systems. The images, reviewed by TechCrunch, showed what appeared to be internal dashboards, including an employee’s Okta portal used to access company applications. The hackers alleged they gained entry to CrowdStrike by exploiting a recent breach at Gainsight, a CRM platform that helps Salesforce customers manage customer data. According to the group, data stolen from Gainsight enabled them to infiltrate CrowdStrike.

However, CrowdStrike disputes this narrative. The company says the hackers’ claims are “false” and stresses that its systems were never compromised. Instead, the insider reportedly shared photos of his computer screen externally — a violation that led to his access being revoked and his employment terminated. “Our systems were never compromised, and customers remained protected throughout. We have turned the case over to relevant law enforcement agencies,” CrowdStrike spokesperson Kevin Benacci told TechCrunch. Gainsight did not respond to requests for comment. Several other technology companies have reportedly been targeted in the same campaign.

Scattered Lapsus$ Hunters is a coalition of groups including ShinyHunters, Scattered Spider, and Lapsus$, all known for social engineering attacks that trick employees into granting system or database access.
In October, the collective claimed to have stolen over 1 billion records from major corporations using Salesforce for customer data. The hackers published a leak site listing stolen information from companies such as Allianz Life, Qantas, Stellantis, TransUnion, Workday, and more.

Author: Kandi Srinivasa Reddy, Srinivasa Reddy Kandi, #KandiSrinivasaReddy, #SrinivasaReddyKandi