SolarWinds Issues Advisory Following Salesloft Drift Security Breach

On 19 September 2025, SolarWinds Corporation released an official security advisory in response to a significant data breach involving Salesforce systems. The breach, which occurred through compromised OAuth tokens linked to the Salesloft Drift integration, resulted in unauthorized access to sensitive customer information.

According to preliminary investigations, attackers demonstrated sophisticated knowledge of the integration’s architecture and targeted authentication credentials, including access keys and passwords, enabling access to multiple Salesforce customer instances. The incident primarily affected the Salesloft Drift integration, a popular CRM link, and the attack appears to have exploited a shared integration point to reach various customer environments.

SolarWinds has confirmed that it does not utilise the compromised Salesloft Drift integration, effectively removing direct impact from this vector, but has deemed the incident a critical priority and has implemented enhanced monitoring and security controls. All OAuth tokens and API connections have undergone security audits, and the organisation continues to monitor the situation and provide updates as investigations progress.