Google Discloses Data Breach: Hackers Compromise Customer Information through Salesforce Database Access

Google has reported that a recent breach in their database has resulted in the unauthorized access of specific customer information.

In a blog post published late Tuesday, Google’s Threat Intelligence Group disclosed that a Salesforce database, used for managing contact information and related notes for small to medium-sized businesses, was breached by a hacking group known as ShinyHunters, officially recognized as UNC6040.

“The data accessed by the threat actor consisted of basic business information, much of which was already publicly accessible, including business names and contact details,” the company stated.

Google has not disclosed how many customers were affected, and a spokesperson has yet to respond to inquiries. It remains uncertain whether the company has received any form of communication, such as a ransom demand.

ShinyHunters is known for targeting large corporations and their cloud databases.

This incident is the latest in a series of breaches impacting Salesforce cloud systems, following recent data thefts involving Cisco and the airline giant Qantas, as well as notable retail brands like Pandora, according to reports from Bleeping Computer. Google’s blog indicated that the ShinyHunters group employs voice phishing tactics to trick company employees into granting access to their Salesforce cloud databases.

Google suggested that the ShinyHunters group might be preparing a data leak site, a tactic used by some ransomware groups to release stolen data in an effort to extort companies for ransom payments. The group reportedly has ties to other hacking collectives, including The Com, a notorious gang known for employing hacking, extortion, and at times threats of violence to gain access to systems.

Do you have additional information regarding the Google data breach? Have you received any alerts from Google? Please reach out to this reporter securely via encrypted message at zackwhittaker.1337 on Signal.