<\/p>\n
Salesforce is investigating what it described as \u201cunusual activity\u201d involving Gainsight-published applications that may have exposed customer data, prompting the company to suspend access to the affected tools while the inquiry continues.<\/p>\n<\/div>\n
In a brief update posted on its status site, Salesforce<\/a> said some Gainsight-developed applications that customers install and manage themselves may have allowed unauthorised access to certain Salesforce data. As a precaution, the company has revoked all active access to the applications.<\/p>\n<\/div>\n Salesforce stressed that there was no evidence to suggest the issue stemmed from a flaw in its own platform, and said it was working to understand the extent of the activity.<\/p>\n<\/div>\n Gainsight confirmed on its website that it is cooperating with Salesforce as the investigation unfolds, but did not provide additional details. Requests for further comment from the company were not immediately returned.<\/p>\n<\/div>\n Although the scale and nature of the incident remain unclear, security researchers note that attackers<\/a> are increasingly targeting the connective tissue between major software-as-a-service platforms. Integrations that allow different systems to share data can also create high-value entry points for hackers if not properly secured.<\/p>\n<\/div>\n Recent incidents underscore this pattern. Last month, Google<\/a> said that a flaw in Oracle\u2019s E-Business Suite had likely affected more than 100 organisations. Earlier in the year, Google disclosed that attackers had convinced employees at Salesforce customer organisations to install tampered versions of Salesforce\u2019s Data Loader tool, enabling access to sensitive information.<\/p>\n<\/div>\nGrowing risks in software integrations<\/h2>\n