Cybersecurity giant CrowdStrike confirmed last month that it had fired a “suspicious insider” who allegedly provided information about the company to a notorious hacking group.
A hacking collective known as Scattered Lapsus$ Hunters published screenshots on a public Telegram channel late Thursday and early Friday morning that showed insider access to CrowdStrike systems. A screenshot seen by TechCrunch shows a dashboard with links to company resources, including the user Okta dashboard that employees use to access internal apps.
The hackers claimed on their Telegram channel that CrowdStrike was compromised by a recent breach at Gainsight, a customer relationship management company that helps Salesforce customers track and manage their customer data. The hackers said they used information stolen from Gainsight to break into CrowdStrike.
However, CrowdStrike said the hackers' claims were “false” and that it suspended the insider's access after “the company determined that the insider had shared a photo of his computer screen with an external party.”
“Our systems were never compromised and our customers remained protected throughout. We have turned the matter over to the relevant law enforcement agencies,” CrowdStrike spokesperson Kevin Benacci told TechCrunch.
Several other technology companies were also allegedly hacked as part of the same campaign. Gainsight did not respond to TechCrunch's request for comment.
Scattered Lapsus$ Hunters is a collective of hackers made up of several hacker groups, specifically ShinyHunters, Scattered Spider, and Lapsus$. Group members use social engineering techniques to trick employees into giving them access to systems and databases.
In October, Scattered Lapsus$ Hunters claimed to have stolen more than 1 billion records from major companies that rely on Salesforce to host customer data. Hackers published a data breach site containing data stolen from companies including insurance giant Allianz Life Insurance, airline Qantas, carmaker Stellantis, credit reporting company TransUnion and employee management platform Workday.
tech crunch event
San Francisco | October 13-15, 2026