Salesforce Bruised over Heroku Breach Response

Heroku, a cloud platform-as-a-service (PaaS) frequently used in Salesforce devops pipelines, was acquired by Salesforce in 2010. On May 3, 2022, Salesforce Incident Response sent out a carefully worded email alert to all owners of Heroku accounts. In the email, Salesforce stated that they will reset the passwords of all Heroku accounts on May 4. The email gave no details about a Heroku breach, except to refer readers to a thread on status.heroku.com. The email also warned that any passwords previously used on Heroku should not be used on any other system.

https://salesforcedevops.net/index.php/2022/05/09/salesforce-bruised-over-heroku-breach-response/