Scope of Salesforce Attacks Expands as Icarus Leaks Data

The Klue-Salesforce breach continues to widen, with a threat actor calling itself Icarus now leaking data taken from victim organizations, according to Dark Reading. The incident traces back to attackers who breached Klue, a competitive-intelligence vendor, and abused its OAuth tokens to access customers’ Salesforce data. Additional victims have emerged since the breach was first disclosed. Organizations that integrated Klue with Salesforce should treat previously connected data as potentially exposed and monitor for leaked data tied to their org.