TLDR InfoSec · ATTACKS & VULNERABILITIES
THE SALESLOFT-DRIFT BREACH: ANALYZING THE BIGGEST SAAS BREACH OF 2025
Summary from the TLDR InfoSec newsletter
The biggest SaaS security incident in 2025 exploited the integration between Salesloft and Drift, compromising over 700 companies. Attackers abused OAuth tokens and SaaS-to-SaaS connections to move laterally, bypassing traditional security defenses and harvesting sensitive credentials. The supply chain nature of the breach allowed a single compromise to spread rapidly across interconnected apps like Salesforce and Gmail, amplifying its impact.