Lưu trữ — US — techcrunch
Google says hackers stole data from 200 companies following Gainsight breach
Google confirmed a massive data breach involving over 200 companies' Salesforce-stored data linked to Gainsight applications. The hacking group Scattered Lapsus$ Hunters claimed responsibility, drawing on previous breaches targeting firms like Atlassian and Verizon. Salesforce states no flaw in its platform caused the breach, emphasizing ongoing investigations with Gainsight's collaboration.
Điểm chính
- Google identified a breach affecting over 200 companies' Salesforce data due to vulnerabilities in Gainsight applications.
- Salesforce reported a breach of certain customers' data but did not specify the companies impacted.
- The hacking group Scattered Lapsus$ Hunters, which includes ShinyHunters, claimed responsibility via Telegram.
- Companies like CrowdStrike confirmed they were not affected while others, including Malwarebytes, are investigating their circumstances.
- Hackers accessed Gainsight from prior campaigns targeting Salesloft, enabling them to obtain Salesforce-linked data.
- Salesforce has revoked access tokens for Gainsight-related apps as a precaution, asserting no vulnerabilities in its platform.
Vì sao quan trọng
- Cybersecurity continues to be a critical issue, with data breaches affecting major companies across various sectors.
- The 2025 IT Trends highlight the increasing sophistication of hacking groups and the importance of robust cybersecurity measures.
- The rise of supply chain attacks underlines the need for enhanced security protocols among service providers linked to major platforms.
This incident emphasizes the vulnerabilities within the supply chain, prompting a reevaluation of security measures for companies relying on third-party applications, as highlighted in evolving IT trends.