Google Confirms 200+ Companies Hit in Salesforce Supply Chain Breach

[madmax]

Google has confirmed that hackers stole Salesforce-hosted data from more than 200 companies in a wide-scale supply chain attack. The breach originated from compromised apps published by Gainsight, a customer success platform. The Scattered Lapsus$ Hunters group — including ShinyHunters — has taken responsibility, claiming victims such as Atlassian, LinkedIn, GitLab, F5, and Verizon. Salesforce says no vulnerability in its own platform was involved.

[Nahid Hossen]

200+ companies? That’s massive.

[Abdul Khan]

Supply chain hacks are becoming the biggest threat now.