#salesforce-breach

[ follow ]
#shinyhunters #supply-chain-attack #oauth-token-theft #unc6395 #kering #customer-data-breach #ransom-demand
Information security
fromDataBreaches.Net
10 hours ago

Update: Kering confirms Gucci and other brands hacked; claims no conversations with hackers? - DataBreaches.Net

Millions of customers of Kering brands had personal data accessed in two Salesforce breaches, with alleged ransom negotiations and partial disclosure to authorities and customers.
Information security
fromApp Developer Magazine
8 months ago

Salesforce data breach linked to Tenable via Salesloft Drift

A Salesforce-Salesloft Drift integration breach exposed limited customer contact and support case data at multiple organizations, including Tenable, while core product data remained uncompromised.
#supply-chain-attack
more#supply-chain-attack
Information security
fromZDNET
1 week ago

'2.5 billion Gmail users at risk'? Entirely false, says Google

Google did not issue a broad warning about a Gmail breach; attackers targeted Salesforce cloud data and phishing/vishing threats remain active.
Information security
fromTheregister
2 weeks ago

Google links Salesforce data thefts to Salesloft breach

Attackers stole OAuth tokens from the Drift app used by Salesloft to access Salesforce databases and exfiltrate sensitive credentials and customer records.
Information security
fromApp Developer Magazine
8 months ago

Salesforce breach let hackers steal Google customer data

A Google corporate Salesforce instance was breached by UNC6040, exposing basic business contact data, prompting impact analysis and mitigation while extortion campaigns (UNC6240/ShinyHunters) emerged.
[ Load more ]