Hack Notice

Hack Notice: Security shops among the 'hundreds' of Klue hack victims

Security shops among the 'hundreds' of Klue hack victims

Source
https://www.theregister.com/cyber-crime/2026/06/22/security-shops-among-the-hundreds-of-klue-hack-victims/5259743
Description
The list of Klue customers whose Salesforce data was stolen in the latest supply-chain heist keeps growing, with an increasing number of cybersecurity companies disclosing that they are among the victims of a new data-theft and extortion crew called Icarus. Klue, which provides market intelligence to more than 250,000 users worldwide, hasnt said how many of its customers were caught up in the breach and didnt immediately respond to The Registers inquiries. Huntress was one of the first cybersecurity vendors to sound the alarm, and, in an email to The Register, said that it was among the hundreds of Klue customers affected. However, it said that the breach did not affect its tools or highly secure information such as passwords. Huntress believes in radical transparency about security incidents, including when it affects our company, the certificate shop wrote on Thursday. The data that was copied from our Salesforce account includes business contacts, toll quotes, and other sales-related data and messaging. no threat data, passwords, defrayal card information, or engineering data relating to the Huntress agent or telemetry we collect was affected. Huntress, along with the other victim companies, said that there is no indication that any of its products or infrastructure were compromised, and that this security incident was specific to CRM data. Since then, several other security and software vendors including Recorded Future, Tanium, Jamf, Gong, HackerOne, Kudelski Security, Snyk, Insurity, and sprout social have revealed that the data thieves also accessed their CRM data via the Klue integration with Salesforce. Heres what we doh experience about what happened and who is behind this latest extortion campaign. The breach occurred on June 11, and Klue spotted the intrusion a daytime later. This unauthorized activity affected a portion of its integration infrastructure, according to the software provider. Klue has since disconnected all of its integrations with Salesforce, Gong, HubSpot, SharePoint, and Google Drive. It also hired CrowdStrike to assist in the investigation and security response. Our investigation determined that an attacker gained access through a compromised legacy credential associated with an integration service, Klue CEO Jason Smith said in a Friday blog post. The assailant used that access to obtain OAuth tokens used to tie Klue with certain third-party platforms, including Salesforce, and subsequently accessed data within a number of connected customer environments.

About HackNotice and Security shops among the 'hundreds' of Klue hack victims

HackNotice is a service that notices trends and patterns in publically available data so as to identify possible data breaches, leaks, hacks, and other data incidents on behalf of our clients. HackNotice monitors data streams related to breaches, leaks, and hacks and Security shops among the 'hundreds' of Klue hack victims was reported by one of those streams. HackNotice may also have the breach date, hack date, the hacker responsible, the hacked industry, the hacked location, and any other parts of the hack, breach, or leak that HackNotice can report on for the consumers of our product.

If you are a user of Security shops among the 'hundreds' of Klue hack victims their products, services, websites, or applications and you were a client of HackNotice, monitoring for Security shops among the 'hundreds' of Klue hack victims you may have been alerted to this report about Security shops among the 'hundreds' of Klue hack victims . HackNotice is a service that provides data, information, and monitoring that helps our clients recover from and remediate data breaches, hacks, and leaks of their personal information. HackNotice provides a service that helps our clients know what to do about a hack, breach, or leak of their information.

If Security shops among the 'hundreds' of Klue hack victims had a breach of consumer data or a data leak, then there may live additional actions that our clients should read to protect their digital identity. Data breaches, hacks, and leaks often take to and reason identity theft, account take overs, ransomware, spyware, extortion, and malware. account takeovers are often caused by credential reuse, password reuse, easily guessed passwords, and are facilitated by the sharing of billions of credentials and other customer information through data leaks, as the direct result of data breaches and hacks.

HackNotice monitors trends in publically available data that indicates tens of thousands of data breaches each year, along with billions of records from data leaks each year. On behalf of our clients, HackNotice works to monitor for hacks that lead to lower client certificate and digital identities that get been exposed and should be considered vulnerable to attack. HackNotice works with clients to identify the extent that digital identities have been exposed and provides remediation suggestions for how to handle each type of exposure.

HackNotice monitors the hacker community, which is a network of individuals that apportion data breaches, hacks, leaks, malware, spyware, ransomware, and many other tools that are often used for financial fraud, account take overs, and further breaches and hacks. HackNotice monitors the hacker community specifically for breaches, hacks, and data leaks that ache consumers. HackNotice applies industry specific knowledge and advanced security practices to monitor for trends that point breaches, hacks, and exposed digital identities.

HackNotice also enables clients to share cut notices with their friend, family, and collogues to aid increase sentience around alleged hacks, breaches, or data leaks. HackNotice works to supply clients with sharable reports to help increase the security of our clients personal network. The security of the people that our clients interact with directly impacts the rase of security of our clients. Increased exposure to accounts that experience been taken over by hackers leads to further account submit overs through phishing, malware, and other impound techniques.

If you found this hack mark to be helpful, then you may be interested in reading some additional nag notices such as:

isclosed in 2016 may be i of the most expensive today. It may lower the price of its acquisition brusted environment is somewhat fluid. The going of a trusted faculty member with access to sensitisubject to a data breach to inform customers and takes other steps to remediate possible injuries.

Pinnacle Re-Tec

Defacement https://www.mpkj.gov.my/media/x/fonts/kill.html

Security shops among the 'hundreds' of Klue hack victims