The Icarus ransomware group listed G* on its data leak site on 2026-06-23. Claim as published on the leak site: Salesforce data for this corp. Data stolen: SF data - compressed