Skip to content
Submit incident
DII-2025-00294
ReportedReported by fewer than three independent publishers, with no official finding.

Salesloft breached to steal OAuth tokens for Salesforce data-theft attacks

It looks like ShinyHunters and Scattered Spider have found yet another way to compromise Salesforce customers. Lawrence Abrams reports: Hackers breached sales automation platform Salesloft to steal OAuth and refresh...

26 August 2025 · Hacking and intrusion
26 August 2025
DII-2025-002944 sources ↓
Quick facts
Category
Hacking and intrusion
Source
DataBreaches.net
Date
26 August 2025
Drafted by
Raidu Incident Detection

What happened

Not publicly disclosed.

Classification

Category
Hacking and intrusion
Industry
Business and professional services

Sources and evidence

This record was researched and written by the Index, based on the following original reporting.

DataBreaches.net
Salesloft breached to steal OAuth tokens for Salesforce data-theft attacks
26 August 2025
trust.salesloft.com
Salesloft advisory
bleepingcomputer.com
Bleeping Computer
cloud.google.com
Widespread Data Theft Targets Salesforce Instances via Salesloft Drift