Workday hit by social engineering data breach targeting its CRM platform

Workday disclosed it was targeted in a social engineering campaign that allowed threat actors to access information from a third-party CRM, exposing commonly available business contact details (names, emails, phone numbers). The company says customer tenants and tenant data were not accessed, has cut the attackers' access, and added safeguards; the incident is described as part of a broader wave of CRM-focused social engineering attacks affecting other firms.