ShinyHunters Hackers Threaten 400 Firms Over Stolen Salesforce Data
ID: 6fb362a2-63d8-5b45-b457-8d56ffde7f5a
STIX ID: report--6fb362a2-63d8-5b45-b457-8d56ffde7f5a
Feed Name: HackRead
Threat Score
**Executive summary:** ShinyHunters claim to have breached approximately 400 organizations by exploiting overly permissive Salesforce Experience Cloud guest-user configurations (or a claimed platform bypass), exfiltrating names and phone numbers used for extortion and vishing; Salesforce attributes the issue to customer misconfiguration and urges immediate least-privilege configuration reviews and disabling of public APIs.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.