Google Confirms Cyberattack on Salesforce Database by 'ShinyHunters'

Google Confirms Cyberattack on Salesforce Database by 'ShinyHunters'
Aug 6, 2025 21:02
Aug 6, 2025 21:02

Google has confirmed that a cyberattack targeting one of its Salesforce databases has compromised customer data. In a blog post by its Threat Intelligence Group, the company attributed the breach to the notorious hacking group known as “ShinyHunters,” officially tracked as UNC6040, according to TechCrunch.

The compromised information reportedly includes general business data such as company names and contact details—much of which was already partially public. However, Google has not disclosed the number of affected customers or whether the attackers have demanded ransom.

ShinyHunters is known for targeting cloud-based databases and has been linked to recent breaches involving Salesforce data from Cisco, Qantas, and Pandora. According to Google, the attackers used voice phishing techniques to deceive employees and gain access to cloud credentials.

The company further warned that the group may soon launch a dedicated data leak site to escalate ransom demands.