2026 IKEA / Ingka Group — Lapsus$ claim of 180GB internal source code (June 2)
Data compromised
Alleged internal source code, architecture maps, and infrastructure metadata—not confirmed customer records
Technical writeup
On June 2, 2026, Cybernews reported that Lapsus$ claimed to be selling roughly 180 gigabytes of internal data from Ingka Group—the largest IKEA franchisee—including alleged source-code repositories, e-commerce architecture maps, supply-chain logistics systems, cloud infrastructure, and AI/MLOps repos. A sample directory tree referenced about 6,300 internal tool paths without verified file contents. IKEA had not officially confirmed a breach at catalog time; BreachHistory tracks source-code exposure risk separate from customer PII.
Root cause
Lapsus$ extortion claim targeting internal repositories (unverified)