Dynatrace Data Breach Exposes Customer Information Stored in Salesforce

Dynatrace has confirmed that customer data stored in Salesforce was exposed following a third‑party breach involving Salesloft’s Drift application, in August 2025. The incident granted attackers unauthorized access to Salesforce CRM data across multiple companies, with Dynatrace noting that some of its customer‑related data were involved while the breach was limited strictly to Salesforce systems used for business operations.

According to the company, no Dynatrace products, services or operational systems were impacted and Dynatrace’s monitoring and observability platforms remained unaffected. Both Salesloft and Salesforce disabled the compromised integrations and notified affected customers, and secure connections were restored as of 7 September 2025.

The data at risk were basic business contact details, such as names of customer representatives and company identifiers, and no customer support cases or related details were compromised because Dynatrace does not use Salesforce’s case management function. The firm urged customers to watch for phishing or social engineering attempts and to verify communications originate from official Dynatrace domains.