Workflow
Salesloft's Drift app
icon
Search documents
Salesforce Says It Won't Pay Ransom to Hacking Group
PYMNTS.comยท 2025-10-08 00:02
Core Points - Salesforce has decided not to pay a ransom demanded by a hacking group that threatened to publish stolen client data [1][2] - The company is aware of extortion attempts and is providing support to affected customers [2] Data Breach Details - The stolen information was obtained earlier this year through a breach of Salesloft's Drift app, which integrates with Salesforce [3] - Other companies, including Cloudflare, have also been affected by the Drift breach [3] Impact on Cloudflare - Cloudflare reported that information in its customer support system should be considered compromised due to the Drift breach [4] - The compromised data included customer contact information and basic support case data, with some potentially sensitive information like access tokens [4] - Cloudflare identified and rotated 104 compromised API tokens and informed affected customers [5] Broader Implications - The data breaches have raised concerns about social engineering attacks, as the stolen data could be used to enhance such attacks [5][6] - Several companies have disclosed data breaches resulting from the Drift attack, indicating a wider impact on the industry [6] - The reliance on vendors can increase a company's cybersecurity vulnerabilities, as highlighted in previous reports [7]