Salesforce data missing? It might be due to Salesloft breach, Google says

Update: Attackers stole OAuth tokens from the Salesloft Drift third-party app, using them between Aug 8–18 to query and exfiltrate Salesforce data (cases, accounts, users, opportunities) and to access a very small number of Google Workspace accounts configured with Drift Email. Google Threat Intelligence Group tracked the actor as UNC6395, Salesloft and Salesforce revoked access/refresh tokens, removed Drift from AppExchange, and published IOCs and remediation steps urging rotation/revocation of credentials and review of connected integrations.