Salesforce Revokes Access Tokens: Gainsight App Breach May Have Exposed Customer Data

Salesforce has issued a security alert after detecting unusual activity involving Gainsight-published applications connected to its platform, an incident that may have exposed some customers’ Salesforce data. In response, the company has revoked all active access and refresh tokens associated with Gainsight-connected apps and temporarily removed those applications from the AppExchange while investigations continue, according to Salesforce’s notification.

The move follows Gainsight updates noting that access via Salesforce remains unavailable and that their teams are working with Salesforce to diagnose the root cause and restore operations. Salesforce also stated that there is no indication the issue stemmed from a vulnerability in the Salesforce platform, with the activity described as related to the app’s external connection.

The ripple effect extended beyond Salesforce, as Zendesk connectors were also revoked access and HubSpot temporarily delisted the Gainsight app from its marketplace, with Salesforce emphasising that affected customers are those using Gainsight-published applications.