Salesforce Detects Unauthorized Access via Gainsight Apps

Salesforce disclosed on Thursday that it detected unusual activity involving applications published by customer success platform Gainsight, which may have allowed unauthorized access to data from certain customers' Salesforce instances. The cloud computing giant, based in San Francisco, acted swiftly by revoking all active access and refresh tokens for these Gainsight-connected apps and temporarily removing them from its AppExchange marketplace.

The incident, reported late last week, centers on OAuth integrations between Gainsight's applications and Salesforce, where customers install and manage the connections themselves. Salesforce stated in an advisory that its investigation found no vulnerability in its own platform, attributing the activity instead to the apps' external connections. "Our investigation indicates this activity may have enabled unauthorized access to certain customers' Salesforce data through the app's connection," the company said. Affected customers have been notified directly, though Salesforce did not specify the exact number impacted.

Gainsight, a San Francisco-based firm that helps companies manage customer relationships, confirmed it is collaborating...