{"id":13561,"date":"2025-09-08T02:19:35","date_gmt":"2025-09-08T02:19:35","guid":{"rendered":"https:\/\/hostnoc-revamp.branex.org\/blog\/?p=13561"},"modified":"2026-02-18T10:46:35","modified_gmt":"2026-02-18T10:46:35","slug":"salesforce-drift-data-breach","status":"publish","type":"post","link":"https:\/\/hostnoc-revamp.branex.org\/blog\/salesforce-drift-data-breach\/","title":{"rendered":"Salesforce Drift Data Breach Impacts Google, Cloudflare &#038; More"},"content":{"rendered":"<h2>Salesforce Drift Data Breach: Palo Alto Networks: Cloudflare, Google Impacted<\/h2>\n<p><a href=\"https:\/\/hostnoc-revamp.branex.org\/blog\/palo-alto-networks-to-buy-cyberark\/\"><span style=\"font-weight: 400;\">Palo Alto Networks<\/span><\/a><span style=\"font-weight: 400;\"> confirmed on September 2, 2025, that it was among the victims of this supply chain attack, which impacted hundreds of Salesloft Drift customers. The compromised data included business contact information, internal sales account details, and basic customer case data.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Upon discovering the breach, Palo Alto Networks disconnected Drift from its Salesforce environment to mitigate further risk. Like <\/span><a href=\"https:\/\/www.zscaler.com\/\" target=\"_blank\" rel=\"nofollow noopener\"><span style=\"font-weight: 400;\">Zscaler<\/span><\/a><span style=\"font-weight: 400;\">, it emphasized that its products and other systems remained unaffected. Cloudflare also confirmed on September 2, 2025, that it was impacted, noting that the stolen data primarily consisted of customer contact information and basic support case data.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">However, some customer support interactions may have included sensitive details such as access tokens, logs, or passwords. <\/span><a href=\"https:\/\/hostnoc-revamp.branex.org\/blog\/cloudflare-acquires-outerbase\/\"><span style=\"font-weight: 400;\">Cloudflare<\/span><\/a><span style=\"font-weight: 400;\"> urged its customers to rotate any credentials shared through its support system, as these should be considered compromised. The campaign was first reported by Google\u2019s Threat Intelligence Group on August 26, 2025.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Google itself was a victim, with attackers using stolen tokens to access email from a small number of Google Workspace accounts on August 9, 2025. Google advised all Salesloft Drift customers to treat any authentication tokens connected to the platform as potentially compromised. It recommended reviewing third-party integrations, revoking and rotating credentials, and investigating connected systems for unauthorized access.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">This attack follows an unrelated social engineering campaign earlier in 2025 that targeted Salesforce customers through voice phishing. That campaign affected companies like Google, <\/span><a href=\"https:\/\/hostnoc-revamp.branex.org\/blog\/cisco-live-2025\/\"><span style=\"font-weight: 400;\">Cisco<\/span><\/a><span style=\"font-weight: 400;\">, Workday, Adidas, Allianz Life, Qantas, and LVMH subsidiaries, including Louis Vuitton, Dior, and Tiffany and Co. Unlike the current attack, the earlier campaign directly targeted <\/span><a href=\"https:\/\/hostnoc-revamp.branex.org\/blog\/salesforce-to-acquire-informatica\/\"><span style=\"font-weight: 400;\">Salesforce<\/span><\/a><span style=\"font-weight: 400;\"> instances rather than exploiting a third-party application.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The Salesloft Drift data breach highlights the risks of third-party integrations in cloud-based customer relationship management systems. Organizations using Drift are urged to take immediate action to secure their systems by revoking compromised credentials and monitoring for suspicious activity. Salesforce Drift Data Breach underscores the importance of robust cybersecurity measures, including regular audits of third-party applications and prompt credential rotation, to protect sensitive data in interconnected digital ecosystems.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Salesforce Drift Data Breach: Palo Alto Networks: Cloudflare, Google Impacted Palo Alto Networks confirmed on September 2, 2025, that it was among the victims of this<span class=\"excerpt-hellip\"> [\u2026]<\/span><\/p>\n","protected":false},"author":13,"featured_media":13562,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"content-type":"","footnotes":""},"categories":[43],"tags":[],"class_list":["post-13561","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"acf":[],"_links":{"self":[{"href":"https:\/\/hostnoc-revamp.branex.org\/blog\/wp-json\/wp\/v2\/posts\/13561","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hostnoc-revamp.branex.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hostnoc-revamp.branex.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hostnoc-revamp.branex.org\/blog\/wp-json\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"https:\/\/hostnoc-revamp.branex.org\/blog\/wp-json\/wp\/v2\/comments?post=13561"}],"version-history":[{"count":3,"href":"https:\/\/hostnoc-revamp.branex.org\/blog\/wp-json\/wp\/v2\/posts\/13561\/revisions"}],"predecessor-version":[{"id":15036,"href":"https:\/\/hostnoc-revamp.branex.org\/blog\/wp-json\/wp\/v2\/posts\/13561\/revisions\/15036"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/hostnoc-revamp.branex.org\/blog\/wp-json\/wp\/v2\/media\/13562"}],"wp:attachment":[{"href":"https:\/\/hostnoc-revamp.branex.org\/blog\/wp-json\/wp\/v2\/media?parent=13561"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hostnoc-revamp.branex.org\/blog\/wp-json\/wp\/v2\/categories?post=13561"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hostnoc-revamp.branex.org\/blog\/wp-json\/wp\/v2\/tags?post=13561"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}