Cloudflare has confirmed that it was affected by the recent Salesloft Drift supply chain breach. The company said no core infrastructure or services were compromised, but sensitive customer information may have been accessed.
According to Cloudflare, the attacker got access to its Salesforce environment through OAuth credentials tied to the Drift chatbot integration. This allowed the threat actor to exfiltrate data from customer support cases between August 12 and 17, 2025. The breach impacted hundreds of companies that use Salesloft’s integrations.
