Salesforce Discloses Unauthorized Access to Customer Data via Compromised Gainsight-published Applications

On November 19, 2025, Salesforce announced an investigation into unusual activity involving applications published by Gainsight, a company that provides customer success software integrated with Salesforce. In their advisory, Salesforce indicated that they had notified affected customers directly, and that an investigation is ongoing. Salesforce has not yet provided details about the full scope of the malicious activity. 

https://arcticwolf.com/resources/blog/salesforce-discloses-unauthorized-access-customer-data-compromised-gainsight-published-applications/