Google links Salesforce data thefts to Salesloft breach
Attackers stole OAuth tokens from the Drift app used by Salesloft to access Salesforce databases and exfiltrate sensitive credentials and customer records.
Salesforce breach let hackers steal Google customer data
A Google corporate Salesforce instance was breached by UNC6040, exposing basic business contact data, prompting impact analysis and mitigation while extortion campaigns (UNC6240/ShinyHunters) emerged.