Google says hackers stole its customers’ data by breaching its Salesforce database

Google has announced that a recent security incident has resulted in the theft of customer data from one of its databases. In a blog update released late Tuesday, the company’s Threat Intelligence Group revealed that a Salesforce database, utilized for storing contact information and notes for small and medium-sized businesses, was infiltrated by a hacking collective known as ShinyHunters, also identified as UNC6040. The information accessed by the hackers was primarily basic business data, largely available to the public, such as company names and contact information. However, Google has not specified the number of customers impacted by this breach, and there has been no immediate response from the company regarding inquiries about potential ransom demands. ShinyHunters has gained notoriety for targeting large corporations and their cloud storage systems. This incident marks a continuation of a troubling trend, following similar breaches involving Salesforce data at other major firms like Cisco and Qantas, as highlighted by Bleeping Computer. According to Google, the ShinyHunters group employs voice phishing tactics to deceive company personnel into providing access to Salesforce databases. There's also concern that the group may be setting up a data leak site, a common strategy among ransomware gangs to pressure companies into paying for the return of their stolen data. Additionally, ShinyHunters has ties to other cybercriminal organizations, including The Com, known for their use of hacking, extortion, and intimidation techniques to penetrate networks. If you have knowledge about the breach or have received notifications from Google, please reach out securely to the reporter via encrypted messaging on Signal at zackwhittaker.1337.