HR giant Workday discloses data breach after Salesforce attack

Workday disclosed that attackers used social engineering to compromise a third-party CRM (reported as Salesforce), exposing business contact information (names, emails, phone numbers) but not customer tenant data. The breach is tied to a wider ShinyHunters campaign that co-opted OAuth/malicious app linkages and voice phishing to steal CRM data from numerous large organizations for extortion.