Gainsight Apps Breach Exposes Data of Over 200 Salesforce Customers

A significant supply chain attack has compromised Salesforce-stored data from more than 200 companies through applications published by Gainsight. Salesforce confirmed unauthorized access to customer data and is investigating the incident, which is linked to the cybercriminal group ShinyHunters. The breach was disclosed on November 20, 2025, prompting Salesforce to revoke access to the affected applications.