US EditionWorkday Confirms CRM Breach via Social Engineering
Attackers used social engineering to access customer data via malicious OAuth apps on Salesforce, affecting over 11,000 organizations including luxury brands and Workday, with no customer tenants compromised.
- Workday, a human resources software firm, confirmed a data breach on August 6 after attackers accessed a third-party CRM platform from its Pleasanton, CA offices.
- The breach occurred through a social engineering campaign where attackers posed as HR or IT staff to trick employees, linked to the ShinyHunters extortion group.
- The attackers accessed mostly routine professional contact details, including individual identities, electronic mail contacts, and telephone numbers, which could be exploited for future phishing or voice-based social engineering attacks.
- Workday responded promptly by restricting access and implementing additional security measures, emphasizing that there is no evidence indicating any compromise of customer data within their platform or impact on customer accounts.
- The breach highlights ongoing sophisticated cyberattacks targeting Salesforce-hosted CRM systems, suggesting continued vigilance and preparedness are critical for organizations.
Insights by Ground AI
Does this summary seem wrong?
Podcasts & Opinions
15 Articles
15 Articles
TechCrunch+2 Reposted by 2 other sources
HR giant Workday says hackers stole personal data in recent breach
The HR tech giant said it had no indication of any unauthorized access to customer systems, but has not ruled out a breach affecting customers' personal information.
·United States
Read Full Article
Workday Hit In Wave Of Social Engineering Attacks - Cybernoz - Cybersecurity News
Human resources (HR) platform provider Workday has become the latest large organisation to fall victim to a cyber attack originating through a third-party supplier, as the impact of a wave of cyber attacks – likely orchestrated through Salesforce products and linked to the ShinyHunters cyber crime collective – continues to reverberate. In a notice published just prior to the weekend of 16–17 August, the firm said it had fallen victim to a social…
Coverage Details
Total News Sources15
Leaning Left1Leaning Right0Center5Last UpdatedBias Distribution83% Center
Bias Distribution
- 83% of the sources are Center
83% Center
L 17%
C 83%
Factuality
To view factuality data please Upgrade to Premium
