New Extortion Portal Leaks Stolen Salesforce Data

A hacker collective has launched an extortion portal following a massive supply chain attack that compromised Salesforce data from hundreds of companies. The attackers exploited a third-party integration provider, stealing OAuth tokens to gain widespread access to customer information. This sophisticated campaign combined social engineering and the abuse of stolen API tokens to exfiltrate sensitive business data at scale. The new portal now lists victims and threatens to publish their stolen data unless a ransom is paid. The incident serves as a stark reminder of the critical need for robust API security, token management, and vigilant third-party risk assessment.