Hackers Exploit Gainsight Apps, Steal Data from Over 200 Companies via Salesforce

Google has confirmed that hackers stole the Salesforce-stored data of more than 200 companies in a large-scale supply chain hack. The breach was disclosed by Salesforce on Thursday, which revealed that certain customers' data was stolen via apps published by Gainsight, a customer support platform provider to other companies. According to Austin Larsen, principal threat analyst of Google Threat Intelligence Group, the company is aware of more than 200 potentially affected Salesforce instances. Salesforce's disclosure came after the notorious hacking group Scattered Lapsus Hunters, which includes the ShinyHunters gang, claimed responsibility for the hacks in a Telegram channel. The group claimed responsibility for hacks affecting Atlassian, CrowdStrike, Docusign, F5, GitLab, LinkedIn, Malwarebytes, SonicWall, Thomson Reuters, and Verizon. Scattered Lapsus Hunters is known for its involvement in high-profile data breaches and has been linked to various hacking groups. Gainsight's customer support platform is used by numerous companies to manage their customer relationships and provide support services. The platform's integration with Salesforce allows companies to store and manage their customer data within the Salesforce ecosystem. However, the breach highlights the risks associated with supply chain attacks, where hackers target third-party vendors or service providers to gain access to sensitive data. The breach has significant implications for the affected companies and their customers. "This is a wake-up call for companies to review their supply chain security and ensure that their third-party vendors are following best practices for data security," said a cybersecurity expert, who wished to remain anonymous. "Companies need to be proactive in identifying and mitigating potential security risks to prevent such breaches from occurring in the future." The current status of the breach is that Google and Salesforce are working together to investigate the incident and provide support to the affected companies. Scattered Lapsus Hunters has not released any further information about the breach, and it is unclear what data was stolen or how it was used. The incident highlights the need for companies to prioritize data security and implement robust measures to protect their sensitive information. As the investigation continues, companies are advised to review their security protocols and ensure that their third-party vendors are following best practices for data security. The breach serves as a reminder of the importance of supply chain security and the need for companies to be proactive in identifying and mitigating potential security risks.