Salesforce Disables Klue App After OAuth Token Abuse Exposes Customer Data

Salesforce disabled the Klue Battlecards app integration after a security incident at Klue, the competitive-intelligence vendor, on June 11 led to abuse of OAuth tokens and exposure of customer data. The downstream impact has hit other companies that integrated Klue into Salesforce, including cybersecurity firms Huntress and Recorded Future. Organizations using the Klue integration are unable to reconnect until further notice and should review Salesforce access logs for anomalous activity tied to the app’s OAuth grants.