GAINSIGHT CEO DOWNPLAYS IMPACT OF ATTACK THAT SPREAD TO SALESFORCE ENVIRONMENTS

Summary from the TLDR InfoSec newsletter

Gainsight is investigating a breach involving its Salesforce-connected app, working with Mandiant and relying heavily on Salesforce logs to understand which customers were affected and how attackers used compromised OAuth tokens. The company insists that only a small number of customers saw data impact. Google Threat Intelligence has flagged hundreds of potentially affected Salesforce instances.