Zscaler security incident history
Hacking, data breaches and other security incidents involving Zscaler, with related coverage.
Incidents: 2 · Most recent
Zscaler customer data leaked in Salesloft Drift breach
↳ Knock-on damage from the Salesloft incident · View original incidentImpact: Customer information leaked, scale unknown
Zscaler confirmed a leak of customer information resulting from the Salesloft Drift supply chain breach. A follow-up investigation revealed that the attacker accessed Salesloft's GitHub account from March to June for reconnaissance and then stole OAuth tokens used for customer integrations from Drift's AWS environment. The attacker used these tokens to exfiltrate Salesforce data.
Related reports: 10 · last report →Zscaler confirms hack of isolated test server
Impact: One isolated test server
Uncertainty arose over whether Zscaler had been breached. On 14 May 2024, Zscaler confirmed that the hack was limited to an isolated test server.
Related reports: 2 · last report →