A CRM (customer relationship management) environment is the software, data, and connected workflows an organization uses to manage customer interactions. It may include contact and account records, support cases, sales tools, communication history, and integrations with other business systems.
Because these systems can hold sensitive customer information and support essential services, they are valuable targets in cyber attacks. Intruders may seek access to customer records, misuse accounts, or move through integrations into other systems. Defenders protect a CRM environment with access controls, multifactor authentication, monitoring, and secure configuration. During an incident, isolating affected CRM systems can limit further access, but may disrupt customer support and other operations. Access to a CRM alone does not prove that data was viewed or stolen; investigators must establish the scope.