Netcrook
#CRM data
Extortion Claim Puts Wesco in the Spotlight as 2.6M Records Are Alleged
A new victim post tied to Exfilsquad raises a familiar ransomware question: when a leak claim names identity and access data, how much can defenders trust before verification catches up?
OAuth Trust Turns Into a Quiet Salesforce Standoff
Microsoft warned that ShinyHunters-linked tradecraft may be using trusted OAuth relationships to keep Salesforce access alive while bypassing ordinary sign-in checks.
When a Trusted App Becomes the Breach Path
A Salesforce OAuth trust relationship can outlive the login that created it, letting attackers move through CRM data without repeatedly facing MFA.
When a Leak Page Targets a Property Firm, the Real Asset Is the Data
A claimed SpaceBears victim entry for Blenheim shows how one extortion post can combine privacy risk, design IP exposure, and follow-on fraud potential.
When a Partner Token Becomes the Weak Link in a Password Giant’s Orbit
A third-party SaaS incident has put names, emails, phone numbers, physical addresses, and support-case records into the spotlight, showing how delegated cloud access can widen the blast radius far beyond a core product.
The Hidden Risk in a Sales Stack: When a Vendor Breach Reaches the CRM
A disclosed access incident tied to a third-party platform shows how SaaS integrations can extend the reach of a breach far beyond the original vendor.
Stolen Trust: How a Third-Party OAuth Token Put CRM Data in Reach
A reported breach involving a Salesforce-connected environment shows how a single compromised integration credential can turn SaaS trust into a data-access problem.
Leak-Site Claim Puts Salesforce Access Under the Microscope
A reported Icarus victim listing tied to Salesforce data does not prove a breach, but it does spotlight how CRM access, tokens, and exports can become the real prize.
One Forgotten Credential, a Wider SaaS Breach Path
A reported legacy credential tied to a competitive-intelligence platform shows how identity mistakes can ripple into CRM data and business trust.
How a Compromised Klue Integration Could Turn Salesforce Into an Exfiltration Channel
A reported abuse of OAuth-linked SaaS trust shows how one third-party integration can become a quiet path to CRM data.
Trusted App, Quiet Pipe: How a SaaS Integration Can Become a CRM Drain
A reported compromise of a Klue Battlecards integration shows how OAuth-backed connections can turn routine Salesforce access into a low-noise collection path.
The Trust Trap Inside OAuth: How a SaaS Link Can Become a CRM Theft Channel
A breach tied to a third-party integration shows how delegated access can turn a routine business connection into a stealthy route for data theft and extortion.
When a Leak Threat Targets the CRM: Why Salesforce Data Has Become Extortion Gold
A ShinyHunters-attributed post claims Baker Distributing Company data was taken from Salesforce, underscoring how cloud identity abuse can turn ordinary business records into leverage.