We are aware of recent extortion attempts by threat actors, which we have investigated in partnership with external experts and authorities. Our findings indicate these attempts relate to past or unsubstantiated incidents, and we remain engaged with affected customers to provide support. At this time, there is no indication that the Salesforce platform has been compromised, nor is this activity related to any known vulnerability in our technology.
Our security teams are actively working to protect customer environments and data, providing guidance and support. Customers identified as potentially affected have been notified directly. If you have not received a notification, we currently have no evidence suggesting any impact to your account. We continue to monitor the situation closely and encourage customers to remain vigilant against phishing and social engineering attempts, which remain common tactics used by threat actors.

For guidance, please review our blog post (https://www.salesforce.com/blog/protect-against-social-engineering), knowledge article (https://help.salesforce.com/s/articleView?id=005226734&type=1), and reach out through the Salesforce Help portal if you need support.

Security Advisory: Ongoing Response to Social Engineering Threats

We want to inform our customers about a recent security incident involving the Drift app, published by Salesloft, that was installed by individual customers. Salesforce security teams detected unusual activity that may have resulted in unauthorized access to a small number of customers’ orgs data via the app's connection to Salesforce.

It is important to note that this issue did not stem from a vulnerability within the core Salesforce platform, but rather from a compromise of the app's connection.

Upon detecting the activity, Salesloft, in collaboration with Salesforce, invalidated active Access and Refresh Tokens, and removed Drift from AppExchange. We then notified affected customers.

We’re continuing to work with Salesloft as part of our investigation and provide updates as appropriate, including notifying and supporting affected customers with remediation. If you need support, please reach out through Salesforce Help: https://help.salesforce.com/s. 

Security Advisory: Unusual Activity in a Third Party Connected App

Salesforce takes its sanctions and export control obligations seriously, and we require our customers and partners to do the same. Under current United States, European Union, and United Kingdom sanctions, the provision of enterprise management software to individuals or entities in Russia is prohibited. 

Until further notice, we expect our customers and partners will not provide access to Salesforce products and services to their users or affiliates in Russia without appropriate legal authorization. Salesforce may implement technical access controls to support compliance with applicable laws, including as per compliance with OFAC’s Determination Pursuant to Section 1(a)(ii) of Executive Order 14071, European Union Council Regulation 2023/2878, and the United Kingdom Russia (Sanctions) (EU Exit) (Amendment) Regulations 2025.

If your organization requires access to Salesforce products or services in Russia, please contact your Salesforce account team to discuss our exceptions process.


NUESTRO VALOR

Actuamos como asesores de confianza.

Nos ganamos la confianza de nuestros clientes, nuestros empleados y nuestra gran familia a través de la transparencia, la seguridad, el cumplimiento normativo y el rendimiento. También entregamos la infraestructura de mayor confianza del sector.

Estado por producto

Mensaje informativo

Componentes de Trust

Recursos