Top Highlights
-
Integration Pause: Gainsight has temporarily suspended connections to Zendesk and HubSpot due to a supply chain attack affecting its integration with Salesforce.
-
Data Breach Investigation: Salesforce is investigating a breach linked to the ShinyHunters threat group, which may have compromised data from over 200 Salesforce customers via the Gainsight connection.
-
Impact on Products: Multiple Gainsight products are operational but cannot access Salesforce data; integrations with Gong are also deactivated.
-
Security Measures: Gainsight has enhanced its security protocols, advising customers to rotate S3 keys while investigations by Mandiant into the breach are underway.
Supply Chain Vulnerabilities Raise Concerns
Gainsight announced a temporary pause on connections to Zendesk and Hubspot. This pause follows a supply chain attack that targeted its integration with Salesforce. The incident marks a significant setback for Gainsight, a software company that focuses on improving customer retention and efficiency. Last week, Salesforce began investigating this attack, revealing potential breaches impacting Salesforce customer data.
Researchers from Google Threat Intelligence Group traced the attack to the ShinyHunters threat group. This group has been linked to over 200 breach cases involving Salesforce data through Gainsight’s connections. While Gainsight claims its products remain operational, they cannot interact with Salesforce systems at this time. Consequently, Gainsight has also deactivated connections to Gong as a precautionary measure.
Strengthening Security Measures
In response to the attack, Gainsight has implemented several security steps to enhance its defenses. The company rotates multi-factor credentials used for accessing critical systems. Furthermore, it urges customers to rotate their S3 keys, emphasizing a proactive approach to security. Meanwhile, Hubspot reassured its users, stating that it found no evidence of impact from the attack. However, the deactivation of the Gainsight integration remains in place until the investigation concludes.
Salesforce reiterated that this incident stems from an external app connection, not a flaw within its own platform. Previous targeted attacks underscore a pressing need for stronger safeguards in the tech industry. Both companies strive to rebuild trust while navigating these challenges, illustrating the importance of vigilance in digital integrations. The situation reflects broader themes in the technology landscape, where securing customer data remains paramount amid rising threats.
Expand Your Tech Knowledge
Stay informed on the revolutionary breakthroughs in Quantum Computing research.
Stay inspired by the vast knowledge available on Wikipedia.
