Threat actor
Icarus
Tracked by CyberSIXT since Jun 18, 2026 · last activity Jun 26, 2026
Linked incidents
Coverage timeline
-
Klue supply chain hack leaks Salesforce data at two dozen firmswww.securityweek.com · Jun 26, 2026
-
LastPass breach via Klue exposes Salesforce data from Gong, 8x8www.securityweek.com · Jun 24, 2026
-
LastPass reports data breach after Klue hack exposes CRM datasecurityonline.info · Jun 24, 2026
-
Scope of Salesforce Attacks Expands as Icarus Leaks Datawww.darkreading.com · Jun 23, 2026
-
Klue breach leaks OAuth tokens, puts cybersecurity firms on alertwww.infosecurity-magazine.com · Jun 22, 2026
-
Klue supply chain breach leaks Salesforce data after hackwww.securityweek.com · Jun 22, 2026
-
Icarus hack steals OAuth tokens, leaks Klue Salesforce datadatabreaches.net · Jun 21, 2026
-
Klue supply chain breach leaks OAuth tokens via Salesforce APIwww.securityweek.com · Jun 19, 2026
-
Salesforce Data Leak Tied to Compromised Klue Battlecards Appwww.darkreading.com · Jun 18, 2026