Newsbytesapp Gainsight Apps Breach Exposes Data of Over 200 Salesforce Customers
Article Content
Browse articles 
A significant supply chain attack has compromised Salesforce-stored data from more than 200 companies through applications published by Gainsight. Salesforce confirmed unauthorized access to customer data and is investigating the incident, which is linked to the cybercriminal group ShinyHunters. The breach was disclosed on November 20, 2025, prompting Salesforce to revoke access to the affected applications.
Ask AI about this cluster
Answers cite the sources they use
Updated 217d ago How this analysis works
More articles in this cluster (30)
Following this threat?
Track shinyhunters, UNC6240 and Atlassian in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
ShinyHunters Vishing Campaign Targets Okta SSO and SaaS Platforms A voice phishing campaign attributed to the ShinyHunters group is actively targeting organizations using Okta SSO and other SaaS platforms. The attackers impersonate IT staff to convince employees to provide their SSO credentials and MFA codes through counterfeit login portals. Once the attackers gain access, they can… 
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…