Archive · 21 Nov 2025
Salesforce Suspends Gainsight Apps Over Possible Data Leak
Salesforce is looking into a problem with some apps made by Gainsight that might have let people see data they shouldn't.
They turned off these apps for now to keep data safe.
Gainsight is helping with the investigation, but we don't know more yet.
This could be a big problem because apps that connect different services can be targeted by hackers if they're not secure.
Salesforce investigating 'unusual activity' involving Gainsight apps
Access to affected apps temporarily revoked to prevent unauthorized data access
No evidence suggesting issue stems from Salesforce's own platform
Gainsight cooperating with investigation, no additional details provided
Incident highlights growing risks in software integrations
- Who
- Salesforce and Gainsight
- What
- Investigating unauthorized data access via Gainsight apps
- When
- Ongoing investigation
- Where
- Not specified
- Why
- To protect customer data and understand the extent of the activity
Salesforce's Stance
Security Researchers' Perspective
Data Exposure
Salesforce's Stance
Stressed no evidence of platform flaw, working to understand activity
Security Researchers' Perspective
Attackers targeting integrations for high-value entry points
- Affected Apps
- Some Gainsight-developed applications
- Action Taken
- Revoked active access to affected apps
- Platform Involvement
- No evidence of Salesforce platform flaw
- Gainsight Response
- Cooperating with investigation