Google security experts say Gainsight hacks may have left hundreds of companies affected

Hands on a laptop with overlaid logos representing network security.

• Google Threat Intelligence Group says the Gainsight breach may have impacted 200+ Salesforce instances
• Attack stems from the August 2025 Salesloft breach, where OAuth tokens were stolen and abused by Scattered Lapsus$ Hunters
• SHL claims victims include Atlassian, CrowdStrike, LinkedIn, and others, though none have confirmed compromise

Google’s security experts believe the recent Gainsight breach may have left more than 200 companies, and the data they stored through Salesforce, compromised.