Klue OAuth Breach Victim List Grows as Icarus Hackers Claim Attack

**Executive summary:** Klue, a competitive intelligence SaaS, confirmed that attackers stole OAuth tokens used to access customers' Salesforce instances; the Icarus extortion group claims responsibility and the incident is part of a broader campaign targeting SaaS-to-Salesforce integrations, risking wide-scale CRM data exposure — revoke tokens, audit connected apps, enable event monitoring, and implement a third-party breach runbook.