Now Hacked
EN
Data breach

Data theft attacks targeting Salesforce customers spread

First reported · Last reported · 15 related reports

SpilloverSpillover from the Salesloft incident · View original incident →

Data theft attacks targeting Salesforce customers continued, with several companies including Google confirming they were affected. The attacks involved voice phishing and the abuse of stolen OAuth tokens from Salesloft Drift. Drift was taken offline, and ShinyHunters claimed to have stolen 1.5 billion records through the Drift hack.

Key facts

Affected organization
Salesforce
Original incident
Fallout continues from breach at AI chatbot firm Salesloft
Incident type
Data breach
Occurred / detected
Not confirmed
Scale of damage
Hundreds of customers affected; attackers claim theft of 1.5 billion records
Cause / method
Voice phishing and abuse of stolen Salesloft Drift OAuth tokens
Location
Other countries

If your data was exposed

  1. Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.

Timeline

  1. Google disclosed a data breach via Salesforce.
  2. Widespread data theft using stolen Salesloft Drift OAuth tokens became known.
  3. The data theft attacks were reported to have affected hundreds of Salesforce customers.
  4. Drift, which had been exploited to hack Salesforce instances, was taken offline.
  5. ShinyHunters claimed to have stolen 1.5 billion Salesforce records through the Drift hack.
  6. A judge consolidated the Salesforce data breach class actions in Northern California.

Original incident

This is spillover from the Salesloft incident.

Also affected by this incident

15 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.