HackerOne Data Breach, Hackers Illegally Access Salesforce Environment

HackerOne confirmed a data breach affecting its Salesforce environment due to a vulnerability in the Drift application provided by Salesloft. The breach allowed unauthorized access to certain customer records, although no sensitive vulnerability data was exposed. HackerOne's security team activated its incident response plan and collaborated with Salesforce and Salesloft to assess the impact. The breach was limited to general Salesforce records, such as contact information.

HackerOne has engaged external forensic experts and disabled the affected integration while ensuring transparency with affected customers. Notifications will be sent to impacted individuals, and guidance will be provided for monitoring unusual activity.