Archive — US — techcrunch
HR giant Workday says hackers stole personal data in recent breach
Workday, a leading HR technology provider, confirmed a data breach where hackers accessed personal information from a third-party database. The stolen data, primarily contact details, may be used in social engineering scams. This incident follows a series of cyberattacks on Salesforce-hosted databases affecting companies like Google and Cisco, raising concerns about data security and management for corporate clients.
Key points
- Workday confirmed a data breach involving a third-party customer database.
- Hackers stole personal information primarily consisting of names, email addresses, and phone numbers.
- While Workday stated there was no indication of direct access to its customer data, it didn't rule it out.
- Stolen information could be used for social engineering scams targeting individuals.
- The hack was discovered on August 6, amidst a series of similar breaches affecting Salesforce-hosted databases.
- Notable companies affected by recent cyberattacks include Google and Cisco, which were also targeted by the ShinyHunters hacking group.
Why it matters
- The incident is part of a broader trend of increasing cyberattacks targeting customer data management systems like Salesforce.
- Workday's breach reflects ongoing vulnerabilities in cloud-based HR and customer relationship management systems.
- Similar data breaches have prompted discussions around cybersecurity practices and regulatory measures within IT sectors in 2025.
- The rise in sophisticated hacking tactics, such as social engineering and phishing, highlights the need for improved employee training and incident response strategies.
Workday's data breach underscores the critical need for robust cybersecurity measures in managing personal data, especially amidst growing threats in cloud services, affecting both businesses and their clients.