Cato Networks Statement on Salesforce-Salesloft Drift Incident 

Cato Networks notified customers of a security incident stemming from misuse of OAuth tokens tied to the Salesloft Drift integration with Salesforce, with unauthorized access occurring between August 8–18, 2025 and impacting hundreds of Salesforce customers; exposed data included business contact details, company attributes, and basic case information. Cato states its SASE platform and internal systems were not affected, lists containment actions (disconnecting Drift, disabling APIs, investigation, dark web monitoring), and advises customers to be vigilant for targeted outreach.