‘It’s a very low-risk way to try to get your data as clean as you possibly can get it, which is also better for your business,’ says Salesforce executive Marla Hay. Salesforce has made products under ...

Recently, dozens of companies confirmed that they were impacted by a large-scale data breach at Salesforce. While notices vary by company, the incident resulted in an unauthorized party being able to ...

The attacks linked to a threat group known as ShinyHunters have now compromised Google in addition to numerous other major companies. A wave of data-theft attacks against Salesforce CRM customers has ...

Google has observed hackers claiming to be the ShinyHunters extortion group conducting social engineering attacks against multi-national companies to steal data from organizations' Salesforce ...

Salesforce said on Wednesday that it’s investigating a breach of “certain customers’ Salesforce data” that was compromised through apps published by Gainsight, a company that sells a platform for ...

Attackers steal OAuth tokens to access third-party sales platform, then CRM data in 'widespread campaign' UPDATE Google says a recent spate of Salesforce-related breaches was caused by attackers ...

Salesloft says attackers first breached its GitHub account in March, leading to the theft of Drift OAuth tokens later used in widespread Salesforce data theft attacks in August. Salesloft is a widely ...

Salesforce customers have again been targeted in a “widespread data theft campaign,” this time via compromised OAuth tokens associated with the third-party Salesloft Drift application. Salesloft Drift ...

Members of a financially motivated threat group are impersonating IT support staff in convincing phone calls and talking employees into granting access to their organization’s Salesforce environments.

Hackers posed as Salesforce IT staff, using vishing to trick employees into installing malicious software for data theft and extortion. A hacking group known as ShinyHunters has been linked to a ...

Salesforce failed to address the massive wave of OAuth breaches at its Dreamforce conference, but securing third-party authentication is paramount for the agentic future it seeks. Salesforce’s 2025 ...