
- Gainsight apps enabled unauthorized Salesforce data access, prompting token revocation and AppExchange removal
- Incident linked to August 2025 Salesloft breach, where OAuth tokens exposed 1.5 billion records
- ShinyHunters used stolen secrets to steal Gainsight customer contact and licensing data
The Salesloft Drift incident seems to have trickled downstream into Gainsight, resulting in hundreds more organizations potentially losing their sensitive data to hackers.