Zscaler data breach exposes customer info after Salesloft Drift compromise
Threat actors got access to Zscaler's Salesforce instance and took client data, including support case contents, causing the cybersecurity company to notify of a data breach.
This warning comes after Salesloft Drift, an AI chat bot that connects with Salesforce, was compromised. The attackers were able to enter customer Salesforce systems and exfiltrate critical data by stealing OAuth and refresh tokens.
Zscaler claims in an advisory that this supply-chain hack affected its Salesforce instance, compromising customer data. According to Zscaler's advice, unapproved actors obtained the Salesloft Drift login credentials of its clients, including Zscaler, as part of this campaign.
After a thorough examination as part of our ongoing investigation, we have concluded that these credentia...