www.darkreading.com 6/23/2026, 9:20:45 PM · external

Scope of Salesforce Attacks Expands as Icarus Leaks Data

Scope of Salesforce Attacks Expands as Icarus Leaks Data
Developing story breach 3 articles tracked
Icarus extortion group leaks Salesforce data via compromised Klue OAuth tokens
CyberSIXT Evidence Panel
Primary Source blog.lastpass.com
Threat Actor
Icarus

THE article discusses the recent expansion of Salesforce data breaches linked to the application vendor Klue. Attackers used Klue's OAuth tokens to access several companies' Salesforce data, impacting tech and cybersecurity firms. The extortion group Icarus has taken responsibility and warned of more victims. Notable companies affected include Huntress and LastPass, both of which confirmed data access but reported their products remain secure.

The breach revealed that attackers might have accessed sensitive information, raising concerns among other impacted organizations. The article emphasizes the need for heightened awareness and precautionary measures against potential social engineering attacks stemming from the compromised data.

View Primary Source Via www.darkreading.com

Article by CyberSIXT

Timeline Coverage

Swipe to explore timeline