Salesforce says some of its customers’ data was accessed after Gainsight breach

Salesforce and Gainsight are investigating a breach involving Gainsight-published applications connected to customer Salesforce instances that reportedly allowed attackers to steal customer data; the hacking group ShinyHunters has claimed responsibility and threatened to publicly leak and monetize the stolen data. The report links the incident to prior Salesloft-related compromises that enabled mass access to connected Salesforce environments, notes ongoing investigations by affected companies, and highlights active extortion tactics by the threat actors.