Salesforce records are business data objects stored in the Salesforce platform, such as leads, contacts, accounts, cases, and notes tied to customer operations. They are important because they often contain sales history, support details, and personally identifiable information, making them valuable to attackers and sensitive for defenders.
In real attacks, threat actors may try to steal Salesforce records through stolen credentials, phishing, malicious OAuth app access, API abuse, or overly broad permissions. Once exported, this data can be used for extortion, fraud, or targeted follow-on attacks. Defenders reduce risk with MFA, least-privilege access, connected-app review, audit logging, API monitoring, and rapid detection of unusual exports or bulk queries. When an extortion claim mentions large numbers of Salesforce records, the exact breach details still need verification, but the platform itself should be treated as a high-value target.