Salesforce Breached Again: ShinyHunters Strike with Gainsight App Fiasco!
Salesforce has been hit by another third-party breach, potentially involving ShinyHunters. Gainsight apps connected to Salesforce were the culprit this time. The CRM giant has revoked access tokens and removed the apps from its AppExchange to prevent further unauthorized access to customer data. Salesforce assures the issue is external, not a platform vulnerability.
Hot Take:
Looks like ShinyHunters are back at it again, giving Salesforce a run for its money. Maybe Salesforce should consider hiring them as consultants to fix the mess they keep creating! Gainsight and Salesforce are having an app-tastic time dealing with this data breach debacle. Perhaps it’s time to start issuing “Sorry, we leaked your data” greeting cards?
Key Points:
– Salesforce disclosed a third-party breach, potentially linked to ShinyHunters.
– Gainsight-published applications are the culprits in this suspicious activity.
– Salesforce revoked all access and refresh tokens related to Gainsight apps.
– The breach isn’t due to a Salesforce platform vulnerability.
– Google attributed the breach to ShinyHunters, urging companies to audit SaaS environments.