Salesforce Disables Klue App Integration After OAuth Token Abuse Exposes Customer Data
Summary
Salesforce disabled the Klue app integration after detecting unusual activity that may have exposed customer data through the app’s connection to Salesforce. Klue said attackers abused a compromised legacy credential to obtain OAuth tokens and access data in connected customer environments. The incident affected multiple customers and triggered token revocation, credential cleanup, and a wider investigation. The story also highlights a broader pattern of SaaS supply chain attacks that exploit trusted third-party integrations.
Classifications
industries
No industries detected
applications
Business Intelligence
AskAI Classifications
Labels
Software
SaaS
Competitive Intelligence Software
Linked Companies
Klue
$10M to $25M