Think big businesses are safe from cyber threats? Think again. Salesforce was recently at the center of a major data breach, triggered by voice phishing (vishing). Attackers impersonated IT staff, tricking employees into entering an eight-digit code on Salesforce’s Connected Apps page. This granted a malicious OAuth app, often disguised as Salesforce’s Data Loader, ongoing access to sensitive CRM data. Global brands like Google, Adidas, Cartier, Chanel, Tiffany & Co., Qantas, Air France, KLM, Allianz, Cisco, and Pandora were affected.
In a related incident, attackers exploited compromised OAuth tokens from the third-party app Salesloft Drift, stealing vast amounts of Salesforce data, including AWS keys and Snowflake tokens. More than 700 organizations were reportedly impacted.
Why This Matters
- Social engineering, not tech flaws, was the weak link - attackers relied on human trust.
- Connected apps create hidden risks when unauthorized or malicious integrations slip through.
- No company is too big to be breached - global enterprises were caught off guard.
Even the largest organizations aren’t immune. Staying vigilant about who and what has access to your data is critical.
Source:Salesforce Data Breach Affecting Multiple Companies.
Check whether your data was exposed — Reklaim Protect is free.