More like this
Judge Lets Salesforce Customer Data Breach Class Action Proceed
Phillip Burton Federal Building & United States Courthouse, 450, Golden Gate Avenue, Civic Center, San Francisco, California, 94102, United StatesSalesforce…
CONFIRMED85% CONFIDENCE10 days agoThe order in In re Salesforce Customers Security Incident Litigation is 'Dated: September 14, 2026' and entered on the docket that day as entry 110.[1]Judge Jacqueline Scott Corley refused to dismiss most claims that Salesforce's lax OAuth security let hackers steal Allianz, Farmers and TransUnion customers' data.0.71Google Exposes UNC6040's Vishing Raids on Salesforce Customers
CONFIRMED88% CONFIDENCE1.3 years agoThe Google[1] Cloud Threat Intelligence post 'The Cost of a Call: From Voice Phishing to Data Extortion' is dated 'June 4, 2025'.Google's threat researchers said a crew posing as IT support on the phone was talking employees into approving a fake Data Loader app, then bulk-stealing their companies' Salesforce data for extortion.0.71Scattered Lapsus$ Hunters Open a Leak Site to Extort Salesforce
Salesforce Tower, 415, Mission Street, Rincon Hill, San Francisco, California, 94105, United StatesSalesforce…
CONFIRMED88% CONFIDENCE356 days agoBleepingComputer's[1][2][3] report dated 'October 3, 2025' says 'Today, they launched a new data leak site containing 39 companies' with an 'October 10 deadline'.The gang posted samples from 39 companies' stolen Salesforce data and told Salesforce to pay by 10 October or see about a billion records leaked.0.70FBI Flash Warns UNC6040 and UNC6395 Are Raiding Salesforce Instances
J. Edgar Hoover Building, 935, Pennsylvania Avenue Northwest, Penn Quarter, Ward 2, Washington, District of Columbia, 20535, United StatesFederal Bureau of Investigation
CONFIRMED89% CONFIDENCE1.0 years agoThe FBI's TLP:CLEAR alert is headed '12 September 2025' with FLASH number 'FLASH-20250912-001'.[1]The FBI published indicators for two crews stealing companies' Salesforce data, one by phoning staff posing as IT support, the other with stolen Salesloft Drift tokens.0.70Salesforce AI Copyright Suit Returns to Judge Breyer for a Case Conference
Phillip Burton Federal Building & United States Courthouse, 450, Golden Gate Avenue, Civic Center, San Francisco, California, 94102, United StatesSalesforce…
SCHEDULED79% CONFIDENCEin 57 daysJudge Breyer's scheduling order (docket 45): 'Case Management Conference set for 11/20/2026 at 8:30 AM in San Francisco - Videoconference Only.'[1]Judge Charles Breyer holds a case management conference in the authors' class action over Salesforce's xGen training data, with fact discovery due to close in July 2027.0.69Salesforce Warns of Mass Theft From Misconfigured Experience Cloud Sites
CONFIRMED85% CONFIDENCE201 days agoSalesforce[1] Security's post is dated 'March 7, 2026' (published 22:48 UTC); FINRA[2]: 'On March 7, 2026, Salesforce reported that ShinyHunters was actively exploiting misconfigured Experience Cloud guest user profiles.'Salesforce said a known threat group was mass-scanning public Experience Cloud sites with a modified Mandiant tool and pulling CRM data through overly permissive guest user profiles.0.69Salesforce Tells Customers It Won't Pay the Scattered Lapsus$ Hunters Ransom
CONFIRMED86% CONFIDENCE352 days agoBleepingComputer[1][4], 7 October 2025: 'Salesforce emailed customers on Tuesday to say they would not be paying a ransom' - Tuesday was 7 October.With the gang's leak deadline three days away, Salesforce emailed customers that it would not engage, negotiate with or pay any extortion demand.0.68Hackers Dump Qantas and Vietnam Airlines Data After Salesforce Deadline
CONFIRMED87% CONFIDENCE348 days agoInformation Age: 'The data was first leaked to a clear-web hacking forum at approximately 2.30pm AEDT Saturday' (11 October 2025), about an hour before it went up free on the dark web.[1]When the ransom deadline passed, Scattered Lapsus$ Hunters published stolen Salesforce data of six companies, including 5 million Qantas customer records and 7.3 million Vietnam Airlines email addresses.0.68Authors Sue Salesforce Over Pirated Books Used to Train Its xGen AI
Phillip Burton Federal Building & United States Courthouse, 450, Golden Gate Avenue, Civic Center, San Francisco, California, 94102, United StatesSalesforce…
CONFIRMED88% CONFIDENCE344 days agoReuters (16 October 2025) says the novelists sued 'in the complaint filed on Wednesday'; the complaint is stamped 'Filed 10/15/25'.[1]Novelists Molly Tanzer and Jennifer Gilmore filed a proposed class action saying Salesforce trained its xGen language models on the Books3 trove of pirated books.0.67Cl0p Starts Emailing Executives Claiming Oracle E-Business Suite Data Theft
CONFIRMED87% CONFIDENCE360 days agoGoogle[1] Threat Intelligence Group: 'Beginning Sept. 29, 2025, Google Threat Intelligence Group (GTIG) and Mandiant began tracking a new, large-scale extortion campaign by a threat actor claiming affiliation with the CL0P extortion brand.'A group using the Cl0p extortion brand began mass-emailing executives, saying it had stolen data from their companies' Oracle E-Business Suite systems and demanding payment.0.66Salesforce Starts Its Record $25 Billion Accelerated Share Repurchase
Salesforce Tower, 415, Mission Street, Rincon Hill, San Francisco, California, 94105, United StatesSalesforce…
CONFIRMED91% CONFIDENCE192 days agoThe release is datelined "SAN FRANCISCO—March 16, 2026" and says Salesforce[1] "today commenced the prepayment and initial delivery"; the Business Wire copy is stamped "Mar 16, 2026 9:03am EDT".Salesforce prepaid $25 billion to five banks and took delivery of about 103 million of its own shares, roughly 80% of the total, in what it called the largest accelerated share repurchase in history.$25B0.66Salesforce's $25 Billion Accelerated Share Repurchase Settles
Salesforce Tower, 415, Mission Street, Rincon Hill, San Francisco, California, 94105, United StatesSalesforce…
ESTIMATED75% CONFIDENCEin 37 daysEstimated: the Q2 FY2027 release says "Final settlement of the company's $25 billion ASR is expected in October 2026", so the pin takes the month's last day; the March release had said "the third or fourth quarter of Salesforce's FY27".[1]Final settlement of Salesforce's record $25 billion accelerated share repurchase, when the banks deliver the last of the shares beyond the 103 million received up front in March.0.65
