Google Confirms Massive Data Heist: 200 Companies Hit in Gainsight Supply Chain Hack

Google has confirmed that hackers stole the Salesforce-stored data of more than 200 companies in a large-scale supply chain hack. The breach was disclosed by Salesforce on Thursday, which stated that certain customers' data was stolen via apps published by Gainsight, a customer support platform provider to other companies. According to Austin Larsen, the principal threat analyst of Google Threat Intelligence Group, the company is aware of more than 200 potentially affected Salesforce instances. Following the breach announcement, the notorious hacking group Scattered Lapsus Hunters, which includes the ShinyHunters gang, claimed responsibility for the hacks in a Telegram channel, as seen by TechCrunch. The group claimed responsibility for hacks affecting Atlassian, CrowdStrike, Docusign, F5, GitLab, LinkedIn, Malwarebytes, SonicWall, Thomson Reuters, and Verizon. Google's Larsen stated that the company is working closely with affected organizations to mitigate the impact of the breach. The breach highlights the vulnerability of supply chain attacks, where hackers target third-party vendors to gain access to sensitive data. Gainsight's apps, which were used to store customer data, were compromised, allowing hackers to steal sensitive information. Salesforce has not named the affected companies, but the list of impacted organizations suggests that the breach has significant industry-wide implications. The Scattered Lapsus Hunters group has been linked to several high-profile data breaches in the past, including the 2021 breach of software company Kaseya. The group's tactics often involve using social engineering and exploiting vulnerabilities in software applications to gain unauthorized access to sensitive data. In response to the breach, Salesforce has advised affected customers to take immediate action to secure their data. The company has also offered support to customers to help them mitigate the impact of the breach. Google's Larsen emphasized the importance of collaboration between companies and cybersecurity experts to prevent and respond to such attacks. The incident serves as a reminder of the need for companies to prioritize cybersecurity and implement robust measures to protect sensitive data. As the tech industry continues to evolve, the risk of supply chain attacks is likely to remain a significant concern.