1.5 billion Salesforce records stolen according to ShinyHunters

ShinyHunters claims to have stolen more than 1.5 billion Salesforce records. According to the group, 760 companies were affected via compromised OAuth tokens from Salesloft Drift.

This was reported by BleepingComputer. The attacks are said to have been going on for a year. The criminals targeted Salesforce customers through social engineering and malicious applications that gained access via OAuth. Once they were able to penetrate a Salesforce environment, data was downloaded. The attackers then used that information to pressure companies and demand ransom. ShinyHunters threatened to make the data public if their demands were not met.

https://www.techzine.eu/news/security/134720/1-5-billion-salesforce-records-stolen-according-to-shinyhunters/