Salesforce Data Breach Investigation

By Jason RathodData Breach

Migliaccio & Rathod LLP is investigating the Salesforce Data Breach. Salesforce houses the data of thousands of other companies, meaning that this data breach may have far-reaching effects.

A hacker collective is attempting to extort some of these companies and has claimed they have acquired up to one billion consumer records hosted in Salesforce. Salesforce finds no indication their core platform was compromised. However, they have found that sensitive consumer data may have been made accessible to an unauthorized party, though the nature of the information and timeline of notices may differ depending on the organization. The impacted data may include:

  • Names
  • Contact Information
  • Social Security Numbers

Are you concerned that you might be affected by the Salesforce data breach?

If you have concerns that you have been affected by this data breach, and/or have experienced suspicious activity recently, we would like to hear from you. Please complete the contact form on this page, send us an email at [email protected], or give us a call at (202) 470-3520.

    The following will ask for your contact information so that we may reach you to talk about potential claims. This information is for our records only and will not be shared. By continuing, you consent to the collection of this information for these limited purposes.


    Did you receive a notification that you were affected by the data breach?


    Would you like to join our newsletter to receive notifications about other investigations we're looking into, as well as updates on ongoing cases?

    The Salesforce Data Breach

    The following companies all may have been affected:

    • Agility PR
    • Avalara
    • BeyondTrust
    • Bugcrowd
    • Cato Networks
    • Cloudflare
    • CyberArk
    • Dynatrace
    • Esker
    • Fastly
    • HackerOne
    • Heap
    • JFrog
    • Lucid (Lucid Software)
    • Megaport
    • Nutanix
    • PagerDuty
    • Palo Alto Networks
    • Pantheon
    • Proofpoint
    • Qualys
    • Rubrik
    • Sigma Computing
    • SpyCloud
    • Tanium
    • Tenable
    • Toast
    • Workday
    • Workiva
    • Zscaler
    • 1-800Accountant
    • Adidas
    • Air France
    • Albertsons
    • Alexander McQueen
    • ASICS
    • Balenciaga
    • Brioni
    • CarMax
    • Cartier
    • Chanel
    • Cisco
    • Disney
    • Engie Resources
    • FedEx
    • Fujifilm
    • GAP (Gap Inc.)
    • Google AdSense
    • Gucci
    • HBO Max
    • Home Depot
    • Houghton Mifflin Harcourt (HMH)
    • IKEA
    • Instructure (Canvas)
    • Instacart
    • Kering
    • KFC
    • Marriott
    • McDonald’s
    • Pandora
    • Petco
    • Puma
    • Qantas Airways
    • Republic Services
    • Saks Fifth Avenue
    • Stellantis
    • Toyota
    • TransUnion
    • UPS
    • Vietnam Airlines

    All of the information stolen is likely valuable and dangerous to affected victims. As is likely to be the case with the Salesforce data breach, in previous cyberattacks, victims of data theft have noticed identity theft attempts ranging from fraudulent charges on bank accounts or credit cards, to unauthorized credit card applications, to medical services or government services ordered in their name, to their information being posted on the dark web, to a massive uptick in the number of spam text messages, calls and emails received.

    Data Breach FAQ

    I received a notice that my information may have been involved in a data breach. What should I do?
    Take the notification seriously and read it carefully. It should outline what specific information was affected (e.g., name, Social Security number, legal case data). Even if you believe your risk is minimal, it’s best to take proactive steps to protect yourself.

    What immediate actions should I take?
        1. Monitor your financial accounts – Regularly check your bank, credit card, and online accounts for unauthorized transactions.
        2. Change your passwords – Update passwords for any accounts that may be connected to the breach. Avoid reusing old or similar passwords. Use a password manager if needed.
        3. Set up two-factor authentication (2FA) – Enable 2FA on your email, banking, and other sensitive accounts to add an extra layer of protection.
        4. Place a fraud alert or credit freeze – Contact one of the three major credit bureaus (Equifax, Experian, TransUnion) to place a fraud alert or freeze your credit report. This makes it harder for someone to open new accounts in your name.
    What is credit monitoring, and should I use it?
    Credit monitoring tracks your credit report for changes or suspicious activity. If the organization that was breached offers this service for free, it’s highly recommended you enroll. These services can alert you quickly to potential fraud.

    How long do I need to stay vigilant?
    The effects of a data breach can surface months or even years later. Stay alert to signs of identity theft for at least 12–24 months. Keep an eye on your credit reports, mail, and any unfamiliar account activity.

    Who can I contact if I need help?
    Use the contact details provided in the breach notification. You can also report identity theft to the Federal Trade Commission at www.identitytheft.gov for recovery resources.
    The lawyers at Migliaccio & Rathod LLP have years of experience in class action litigation against large corporations, including in cases involving data breaches such as this. More information about our current cases and investigations is available on our blog.