The CRM Goldmine: Inside the Salesforce Breach Wave
From Cyberside Chats: Cybersecurity Insights from the Experts by Chatcyberside
June 2, 2026 · 17 min · Episode 75
About this episode
The episode discusses the vulnerabilities in Salesforce and CRM security, highlighting several breaches and the importance of data governance.
It started with a phone call. No malware, no zero-day — just someone talking a Charter worker out of their login. Months later, 4.9 million customer records surfaced on a leak site, pulled from the company's Salesforce instance. The CRM has become the richest target in enterprise security. Sherri and Matt break down why, and walk through three cases: Charter, where one vished login reached everything; the Salesloft Drift and Gainsight chain, where one stolen token unlocked the next breach and the next; and the Salesforce "Aura" campaign, where misconfigured guest accounts exposed hundreds of organizations — including, ironically, identity-protection company Aura. The throughline: Salesforce wasn't breached, the tenants were — and in every case, nobody was watching the data leave. Key Takeaways 1. Govern your CRM as carefully as your email and file storage. You already wrap M365 or Google Workspace in conditional access, audit logs, and DLP. Your CRM holds data just as sensitive — give it the same controls. 2. Lock down who can log in. Enforce phishing-resistant MFA and verify identity before granting access — almost every CRM breach this year started with one compromised or…
People in this episode
Hosts: Sherri, Matt
Topics covered
- Salesforce breach
- CRM security
- data protection
- identity management
- phishing
- OAuth tokens
Keywords
- Salesforce
- breach
- CRM
- data security
- phishing-resistant MFA
- OAuth
- identity protection
Mentioned in this episode
Organizations: Charter, Salesforce, Salesloft, Drift, Gainsight, Aura
More episodes of Cyberside Chats: Cybersecurity Insights from the Experts
- Damaged Goods: When your new hire is already compromised · June 9, 2026 · 15 min
- Shadow Agents: When Your AI Workforce Has No Boss · May 26, 2026 · 29 min
- Better Than Google, Still Risky: The OpenEvidence Story · May 19, 2026 · 15 min
- Finals Week Fallout: The Canvas Hack That Shook Education · May 12, 2026 · 11 min
- 9 Seconds to Zero: Misbehaving AI · May 5, 2026 · 17 min
- Security Debt: The Risk Nobody is Reporting · April 28, 2026 · 29 min
Explore listener stats, chart rankings, contacts and more on the Cyberside Chats: Cybersecurity Insights from the Experts podcast page.