Klue hack leaks Salesforce customer data from numerous companies
After Klue was hacked, Salesforce customer relationship management data from multiple companies was leaked through stolen OAuth tokens. Several cyber security companies, including Huntress, confirmed they had been affected, and the number of affected companies was reported at 200. Klue said the criminals were deleting the stolen customer data, but threats from other hackers continued.
Key facts
- Affected organisation
- Klue
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Customer data and other information of 200 companies
- Cause / method
- Access to Salesforce data via the Klue breach and stolen OAuth tokens
- Location
- Other countries
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- The theft of Salesforce data resulting from the Klue breach and the impact on Huntress were reported.
- Several cyber security companies disclosed that they had been affected, and the leak of customer relationship management data via stolen OAuth tokens came to light.
- While Klue claimed the criminals were deleting the stolen data, threats from other hackers continued.
- Additional companies affected by the Klue breach were identified.
- It emerged that 200 companies had been affected by the Klue breach, which was carried out using four-year-old credentials.
Also affected by this incident
Huntress hit by Salesforce data theft stemming from Klue breach
↳ Knock-on damage from the Klue incident · View original incidentHuntress Labs, Inc. was also affected as the Klue breach led to the theft of Salesforce data. The specific scale of the damage, the categories of information, the date of the incident and the response have not been confirmed.
Read on Help Net Security ↗
10 related reports
- Klue hack results in data breach at several cybersecurity firms
- Klue breach exposed Salesforce CRM data through stolen OAuth tokens
- Klue Hack Leads to Data Breach Across Multiple Cybersecurity Companies
- More Cybersecurity Firms Disclose Impact From Klue Hack
- Security shops among the 'hundreds' of Klue hack victims
- Klue hack leads to customer data breach
- Hacked Klue says criminals are deleting stolen customer data, but now other hackers are making threats
- More Klue Breach Victims Identified as Hackers Get Hacked
- Klue Supply Chain Breach Exposes OAuth Tokens and Salesforce Data in Multi-Stage Cybersecurity Incident (June 2026)
- Klue Breach Hits 200 Firms via 4-Year-Old Credential [2026]
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.