Salesforce Data Drama: Gainsight OAuth Apps Under Siege by ShinyHunters
Salesforce has raised the alarm on suspicious activity in Gainsight-linked OAuth apps, hinting at unauthorized access to some customers’ data. The company swiftly revoked all app tokens and pulled the apps from AppExchange, emphasizing it’s not a platform flaw but an external connection issue. Stay alert, folks!
Hot Take:
Looks like Gainsight’s OAuth apps got a little too friendly with Salesforce data and invited some unwanted guests to the party. Who knew app connections could be such social butterflies? Time to revoke those tokens and send them to app-rehab!
Key Points:
- Salesforce detected unusual activity in Gainsight-linked OAuth apps.
- Tokens were revoked and apps removed from AppExchange as a precaution.
- No vulnerabilities in Salesforce itself were found; issue stems from external connections.
- ShinyHunters, a group with a history of targeting Salesforce, is suspected.
- Gainsight was also affected in a previous attack on Salesloft Drift.
Already a member? Log in here