Hackers Use Salesforce Gainsight Breach to Access Data From More Than 200 Companies

Hackers Use Salesforce Gainsight Breach To Access Data From More Than 200 Companies - Cybernoz - Cybersecurity News

Open the article to view the coverage from cybernoz.com

Hackers Use Salesforce Gainsight Breach to Access Data from More Than 200 Companies

Salesforce has disclosed a significant security incident involving unauthorized access to customer data through compromised Gainsight-published applications. The breach, detected in mid-November 2025, potentially exposed sensitive information from over 200 organizations that use the customer success platform integrated with Salesforce. Threat actors linked to the notorious ShinyHunters group exploited OAuth tokens to gain unauthorized access […]…

Salesforce Disables Connections to Gainsight-Published Applications Amid Investigation of Data Breach

Salesforce told customers Friday (Nov. 21) that it detected unusual activity involving applications published by Gainsight and installed and managed directly by customers. “Our investigation indicates this activity may have enabled unauthorized access to certain customers’ Salesforce data through the app’s connection,” the company said in a help article published Friday. Salesforce disabled the connection between Gainsight-published ap…