2/4/2026 · 1 min read
salesforcedata-breachcybersecuritysecurityshinyhuntersthreat-intelligence
Investigations by Mandiant and Google Threat Intelligence indicate the ShinyHunters Salesforce data theft is expanding, with threat actors employing consistent tactics and broadening SaaS data theft operations. Experts warn the issue is far from over and could potentially worsen.
Telecommunications giant Odido (formerly T-Mobile Netherlands) has fallen victim to a social engineering attack on its Salesforce instance, potentially exposing data for up to six million current and former customers. The breach involved phishing employee credentials and bypassing security layers to access customer records.
GoDaddy has integrated its agent verification processes with Salesforce MuleSoft. This strategic move aims to enhance security, ensure compliance, and streamline operational efficiency for its customer service interactions.
A critical vulnerability in BeyondTrust software, which integrates with Salesforce, is actively being exploited by hackers. Salesforce organizations are urged to take protective measures if they use affected BeyondTrust Remote Support or older Privileged Remote Access versions.