{"id":223084,"date":"2025-10-17T09:55:51","date_gmt":"2025-10-17T16:55:51","guid":{"rendered":"https:\/\/www.mcafee.com\/blogs\/?p=223084"},"modified":"2025-10-17T09:55:51","modified_gmt":"2025-10-17T16:55:51","slug":"hackers-trick-major-companies-into-exposing-salesforce-data-find-out-if-youre-impacted","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/security-news\/hackers-trick-major-companies-into-exposing-salesforce-data-find-out-if-youre-impacted\/","title":{"rendered":"Hackers Trick Staff Into Exposing Major Companies’ Salesforce Data\u2013Find Out if You’re Safe"},"content":{"rendered":"

Cybercriminals tricked employees at major global companies into handing over Salesforce access and used that access to steal millions of customer records.<\/span>\u00a0<\/span><\/p>\n

Here\u2019s the McAfee breakdown on what happened, what information was leaked, and what you need to know to keep your data and identity safe:<\/span>\u00a0<\/span><\/p>\n

What\u2019s Happening<\/span>\u00a0<\/span><\/h2>\n

Hackers claim they\u2019ve stolen customer data from multiple major companies, including household names like Adidas, Cisco, Disney, Google, IKEA, Pandora, Toyota, and Vietnam Airlines. <\/span>Security Week<\/span><\/a> has reported throughout 2025 on a wave of social-engineering attacks exploiting human \u2013 rather than platform \u2013 vulnerabilities.<\/span>\u00a0<\/span><\/p>\n

According to <\/span>The Wall Street Journal,<\/span><\/a> the hacking group has already released millions of Qantas Airlines customer records and is threatening to expose information from other companies next.\u00a0<\/span>\u00a0<\/span><\/p>\n

The data <\/span>reportedly includes<\/span><\/a> names, email addresses, phone numbers, dates of birth<\/span><\/b>, and <\/span>loyalty program details<\/span><\/b>. While it doesn\u2019t appear that financial data was included, this kind of personal information can still be exploited in phishing and scam campaigns.<\/span>\u00a0<\/span><\/p>\n

Salesforce has issued multiple advisories stressing that these attacks stem from credential theft and malicious connected apps \u2013 not from a breach of its infrastructure.<\/span>\u00a0<\/span><\/p>\n

Unfortunately, incidents like this aren\u2019t rare, and they\u2019re not limited to any one platform or industry. <\/span><\/b>Even the most sophisticated companies can fall victim when hackers rely on social engineering and manipulation to breach secure systems.<\/span>\u00a0<\/span><\/p>\n

How the Hackers Did it<\/span><\/b>\u00a0<\/span><\/h2>\n

Hackers reportedly called various companies\u2019 employees pretending to be IT support staff\u2014a tactic known as <\/span>\u201cvishing\u201d<\/span><\/b>\u2014and convinced them to share login credentials or connect fake third-party tools, essentially handing the criminals the keys to their accounts. Once inside, they accessed customer databases and stole the information stored there.<\/span>\u00a0<\/span><\/p>\n

Think of it less like a burglar breaking a lock, and more like someone being tricked into opening the door.<\/span>\u00a0<\/span><\/p>\n

What data was leaked<\/span><\/b>\u00a0<\/span><\/h2>\n

So far, leaked data appears to include:<\/span>\u00a0<\/span><\/p>\n