Salesforce Cuts Off Gainsight Apps After Suspicious Access to Customer Data
CONFIRMED88% CONFIDENCEGainsight's[1][3][4] incident timeline (PST): 'November 19, 2025 - Afternoon Salesforce notifies Gainsight of unusual activity involving the Gainsight Salesforce Connected App'; The Register[5] says Salesforce announced the revocation on Wednesday, 19 November.
Salesforce revoked every token held by Gainsight-published apps and pulled them from the AppExchange after spotting API calls from unrecognised IPs into customers' Salesforce data.
1.00