Salesforce Flags Data Breach via Compromised Gainsight Integration
Third-party "handshake" exploited to access customer CRM data
Salesforce issued a security advisory on Friday, Nov. 21, warning customers of unauthorized access to their data instances caused by a compromise in its integration with Gainsight. The incident highlights the growing "supply chain" risk in the enterprise SaaS ecosystem, where interconnected applications create multiple points of failure.
The Attack Vector
The breach did not exploit a vulnerability in Salesforce’s core platform but rather leveraged the OAuth token exchange between Salesforce and Gainsight. * Token Hijacking: Attackers seemingly compromised the "handshake" authentication tokens that allow Gainsight to read and write data within Salesforce. * Unauthorized Access: This granted the …
Archive Access
This article is older than 24 hours. Create a free account to access our 7-day archive.