Skip to content

Salesloft Drift Breach Affects 700+ Companies, Including Tech Giants

A major data breach at Salesloft Drift has compromised the data of over 700 companies, including tech giants. Customer contact information and support case details may have been exposed.

This picture shows few jet planes releasing smoke all are blue and yellow in color and we see blue...
This picture shows few jet planes releasing smoke all are blue and yellow in color and we see blue sky.

Salesloft Drift Breach Affects 700+ Companies, Including Tech Giants

More than 700 companies may have fallen victim to a significant data breach, involving a popular automation tool, Salesloft Drift. Several large tech companies, including Cloudflare, Zscaler, and Palo Alto Networks, have confirmed they were affected.

The incident began when Okta observed failed attempts to use a compromised Salesloft Drift token to access an Okta Salesforce instance. Salesloft promptly paused the Salesforce-Salesloft integration and took the Drift platform offline. Hackers managed to access customer contact information, support case details, and potentially sensitive data from affected companies. Google's threat intelligence group advised all Salesloft Drift customers to treat authentication tokens as potentially compromised.

Cloudflare found 104 compromised API tokens and urged customers to rotate credentials that may have been shared. Zscaler and Palo Alto Networks also confirmed data access, with Palo Alto Networks reaching out to potentially affected customers. Salesloft later confirmed the breach and acquired Drift, the AI chatbot company involved.

The breach has affected numerous corporate Salesforce instances, with the goal of stealing sensitive credentials. More than 700 companies may have been impacted, highlighting the need for robust cybersecurity measures. Salesloft has taken steps to mitigate the incident and advised customers to rotate their credentials.

Read also:

Latest