// UNCLASSIFIED // CLEARED FOR PUBLIC RELEASE //
FILE PUB-ENTDTG 0600Z
ColdRecon › Threat Groups › Lapsus$
Threat Group Dossier

Lapsus$

CLEARED FOR PUBLIC RELEASE · OPEN-SOURCE INTELLIGENCE
Lapsus$ — 7 attributed incidents across our corpus.
Incidents on file7
First seen2024-01-15
Last seen2026-05-31
Top sectortelecommunications

Techniques observed (MITRE ATT&CK)

T1486 Data Encrypted for Impact (2)T1195 Supply Chain Compromise (2)T1078 Valid Accounts (1)

Sectors targeted

telecommunications (1)telecom (1)AI (1)

Attributed breaches

2026-05-31
ransomware
Vodafone
2026-05-28
ransomware
Vodafone
2026-04-28
supply chain
Checkmarx
2026-01-03
unknown
Resecurity
2025-11-24
unknown
CrowdStrike
2025-06-20
stolen creds
Vietnam Airlines
2024-01-15
supply chain
Mercor

Track this in real time.

ColdRecon watches the public signal so you don't have to — a daily brief and a live detection-coverage desk. Request clearance.

Request Clearance →