FBI Flash Alert: Cyber Criminal Groups UNC6040 and UNC6395 Compromising Salesforce Instances for Da

FLASH Alert-20250912-001 TLP:Clear Summary The Federal Bureau of Investigation (FBI) is releasing this FLASH to disseminate Indicators of Compromise (IOCs) associated with recent malicious cyber activities by cyber criminal groups UNC6040 and UNC6395, responsible for a rising number of data theft and extortion intrusions. Both groups have recently been observed targeting organizations’ Salesforce platforms via…[Source](https://databreaches.net/2025/09/13/fbi-flash-alert-cyber-criminal-groups-unc6040-and-unc6395-compromising-salesforce-instances-for-data-theft-and-extortion/?pk_campaign=feed&pk_kwd=fbi-flash-alert-cyber-criminal-groups-unc6040-and-unc6395-compromising-salesforce-instances-for-data-theft-and-extortion)![](https://analytics.hitsaru.com/piwik.php?idsite=11&rec=1&url=https%3A%2F%2Fdatabreaches.net%2F2025%2F09%2F13%2Ffbi-flash-alert-cyber-criminal-groups-unc6040-and-unc6395-compromising-salesforce-instances-for-data-theft-and-extortion%2F%3Fpk_campaign%3Dfeed%26pk_kwd%3Dfbi-flash-alert-cyber-criminal-groups-unc6040-and-unc6395-compromising-salesforce-instances-for-data-theft-and-extortion&action_name=FBI+Flash+Alert%3A++Cyber+Criminal+Groups+UNC6040+and+UNC6395+Compromising+Salesforce+Instances+for+Data+Theft+and+Extortion&urlref=https%3A%2F%2Fdatabreaches.net%2Ffeed%2F)

Related Tags:
NAICS: 55 – Management Of Companies And Enterprises

NAICS: 54 – Professional

Scientific

Technical Services

NAICS: 541 – Professional

Scientific

Technical Services

NAICS: 518 – Computing Infrastructure Providers

Data Processing

Web Hosting

Related Services

NAICS: 51 – Information

Blog: DataBreaches

Associated Indicators: