アーカイブ — US — techcrunch
Google says hackers stole data from 200 companies following Gainsight breach
Google confirmed a massive data breach involving over 200 companies' Salesforce-stored data linked to Gainsight applications. The hacking group Scattered Lapsus$ Hunters claimed responsibility, drawing on previous breaches targeting firms like Atlassian and Verizon. Salesforce states no flaw in its platform caused the breach, emphasizing ongoing investigations with Gainsight's collaboration.
要点
- Google identified a breach affecting over 200 companies' Salesforce data due to vulnerabilities in Gainsight applications.
- Salesforce reported a breach of certain customers' data but did not specify the companies impacted.
- The hacking group Scattered Lapsus$ Hunters, which includes ShinyHunters, claimed responsibility via Telegram.
- Companies like CrowdStrike confirmed they were not affected while others, including Malwarebytes, are investigating their circumstances.
- Hackers accessed Gainsight from prior campaigns targeting Salesloft, enabling them to obtain Salesforce-linked data.
- Salesforce has revoked access tokens for Gainsight-related apps as a precaution, asserting no vulnerabilities in its platform.
なぜ重要か
- Cybersecurity continues to be a critical issue, with data breaches affecting major companies across various sectors.
- The 2025 IT Trends highlight the increasing sophistication of hacking groups and the importance of robust cybersecurity measures.
- The rise of supply chain attacks underlines the need for enhanced security protocols among service providers linked to major platforms.
This incident emphasizes the vulnerabilities within the supply chain, prompting a reevaluation of security measures for companies relying on third-party applications, as highlighted in evolving IT trends.