Archive · 7 Aug 2025
Google Confirms Data Breach Following Salesforce Cyberattack
Imagine some bad guys tricked Google employees into giving them access to important information.
They pretended to be IT support over the phone, a trick called "vishing".
They got hold of some contact details, mostly ones that were already public.
These hackers are known for stealing data from a program called Salesforce, like a digital address book.
They might release the stolen data online unless they get money.
Google is working to make sure this doesn't happen again.
Google confirmed a data breach affecting its Salesforce system.
The cyberattack targeted small and medium business contact data.
Hackers used 'vishing' to trick employees into granting access.
The attackers extracted basic business contact details.
An extortion group may leak stolen data publicly.
- Who
- Cybercriminals, specifically the group UNC6040, targeted Google.
- What
- A data breach involving Google's Salesforce system, resulting in the theft of business contact details.
- When
- The exact timeframe of the breach is not specified.
- Where
- The breach affected a Salesforce system used by Google.
- Why
- The attackers aimed to steal data and potentially extort Google.
- Victim
- Type of Attack
- Vishing (Voice Phishing)
- Data Stolen
- Basic business contact details
- Attacker Group
- UNC6040
- Platform Targeted
- Salesforce
- Extortion Group
- UNC6240 (linked to ShinyHunters)