Gainsight breach: Google says hackers stole data of 200 Salesforce customers

Google has confirmed that a large-scale supply chain attack resulted in hackers stealing data stored in Salesforce systems belonging to more than 200 companies. The stolen data was accessed via apps published by Gainsight, a customer support platform provider. Salesforce initially disclosed the breach of “certain customers’ Salesforce data”, without naming the affected companies. Austin Larsen, the principal threat analyst of Google Threat Intelligence Group, said that the company “is aware of more than 200 potentially affected Salesforce instances.”

According to a TechCrunch report, the cybercrime group known as Scattered Lapsus$ Hunters, which includes the ShinyHunters gang, claimed responsibility for the breaches via a Telegram channel after the announcement.