Cloudflare hit by data breach in Salesloft Drift supply chain attack

Cloudflare disclosed that attackers accessed a Salesforce instance via the Salesloft/Drift supply-chain compromise and exfiltrated 104 Cloudflare-issued API tokens and text-based support case contents (subject lines, case bodies, and customer contact information) between August 12–17; the company rotated the impacted tokens and warned customers to rotate any credentials shared in support tickets. The incident is part of a wider wave of Salesforce-targeting breaches linked to social-engineering campaigns (including activity attributed to ShinyHunters) affecting many organizations and raising the risk of targeted follow-on attacks and extortion.