OneTrust: Privacy and Security Software Company
OneTrust reported impact limited to third-party CRM-related data accessible through the Klue-Salesforce integration.
Tag: data breach
Snyk: Developer Security Platform
Snyk reported impact limited to business data fields in Salesforce environments, including customer business contact information.
Pendo: Product Experience Platform
Pendo reported compromised information related to business relationships and sales activity, including business contact information.
8×8: Communications Platform
8x8 confirmed impact limited to fragmented contract and opportunity information and contact details.
Salesforce Disables Klue App Integration After OAuth Token Abuse Exposes Customer Data
Salesforce disabled the Klue Battlecards app integration after detecting unusual activity that led to unauthorized access to customer data via OAuth token…
Icarus: Extortion Group Behind Klue OAuth Token Abuse
Icarus is an extortion group active since April 28, 2026, responsible for compromising Klue's integration infrastructure and exfiltrating customer data via OAuth…
ShinyHunters: Notorious Data Breach Group
ShinyHunters is a well-known threat actor group infamous for large-scale data breaches and selling stolen data. They have previously exploited Salesforce guest…
Hudson Rock Attributes CI Runner Dumps to TeamPCP
Hudson Rock attributed 118,829 CI runner dumps to 2,488 corporate domains from a 153GB archive of TeamPCP's exfiltrated data.