Salesloft: March GitHub repo breach led to Salesforce data theft attacks

Published on 8 September 2025

Salesloft says attackers first breached its GitHub account in March, leading to the theft of Drift OAuth tokens later used in widespread Salesforce data theft attacks in August. [...]

Continue reading on website
Other news

GitHub Account Compromise Led to Salesloft Drift Breach Affecting 22 Companies

8 September 2025
Salesloft has revealed that the data breach linked to its Drift application started with the compromise of its GitHub account.Google-owned Mandiant, which began an investigation into the incident, said the threat actor, tracked as UNC6395, accessed the Salesloft GitHub account from March through June 2025. So far, 22 companies have confirmed they were impacted by a supply chain breach."With

Hackers hijack npm packages with 2 billion weekly downloads in supply chain attack

8 September 2025
In what is being called the largest supply chain attack in history, attackers have injected malware into NPM packages with over 2.6 billion weekly downloads after compromising maintainers' accounts in a phishing attack. [...]