Salesforce faces class action after Salesloft breach

Updated Salesforce is facing a wave of lawsuits in the wake of a cyberattack that exposed customer data. The claims were all filed in Northern California, where Salesforce is headquartered, over the past five weeks and suggest that the SaaS CRM vendor fell short on security. The complaints, many of which aim for class action status, allege that the personal information of the complainants stolen in the attack is making them targets for identity theft. Salesforce has denied that the security breaches were a result of any shortcomings in its systems. In its public notices, the company has said that its platform was not compromised. From May through summer, a number of Salesforce-related breaches came to light in which attackers stole OAuth tokens from the third-party Salesloft Drift app. Google Threat Intelligence Group later confirmed the attacks. The Register has viewed 15 filings of cases against Salesforce and its users by individuals including those launching class actions. For example, a suit led by Staci Johnson [PDF] accuses Salesforce of failing to properly secure her personally identifiable information (PII) in connection with a data breach in July 2025. The claim calls for Salesforce to "disclose the nature of the information that has been compromised and to adopt sufficient security practices and safeguards to prevent incidents… in the future." The claim says the breach was a "direct result" of Salesforce's "failure to implement adequate and reasonable cybersecurity...