ShinyHunters Says Gainsight Hack Stemmed From Earlier Drift/Salesloft Token Theft

[madmax]

Hackers from the ShinyHunters group told TechCrunch they accessed Gainsight systems using authentication tokens stolen during a previous attack on Salesloft/Drift customers. The tokens allegedly allowed attackers to break into connected Salesforce instances and download stored data. Gainsight, which used Drift itself, confirmed it was impacted in that earlier incident. Salesforce has now revoked active tokens for all Gainsight-linked apps.

[Nahid Hossen]

One breach keeps leading to another — chain reaction.

[Abdul Khan]

These token thefts are way more dangerous than people think. ️