A threat actor claims to have compromised more than 25 million Salesforce records belonging to Alcon. The allegedly exposed data includes personally identifiable information (PII) contained within the Salesforce environment. They intend to publish the data within 3–4 days.