Skip to news
JQJO
Latest

United States: Salesforce disables Klue app after breach | JQJO

United States: Salesforce disables Klue app after breach

Tap title to read story

0:00 / 0:54

Salesforce has disabled the Klue Battlecards application integration after Klue disclosed a security breach involving OAuth token abuse that led to unauthorized access to customer data. According to company reports released on June 19, 2026, an attacker infiltrated Klue’s integration infrastructure on June 11 using a compromised legacy credential tied to a Klue integration service. The intruder generated OAuth tokens to connect Klue with third-party platforms, including Salesforce, and queried CRM systems to exfiltrate business contacts, price quotes, and internal sales messaging. An extortion group known as Icarus later used the stolen data to threaten affected victims. Klue has revoked credentials, removed malicious code, and disabled impacted integrations while forensic investigations continue.

Published · Published by JQJO

Published by JQJO Editorial Desk · AI assisted

More context

Timeline

  1. June 11, 2026 Attacker breaches Klue integration infrastructure
  2. June 11, 2026 Legacy credential enables unauthorized environment access
  3. June 11, 2026 OAuth tokens generated for third-party platforms
  4. June 11, 2026 CRM tools queried for sensitive records
  5. Mid-June 2026 Automated Python scripts perform bulk exfiltration
  6. Mid-June 2026 Extortion group Icarus contacts affected victims
  7. June 19, 2026 Klue publicly reports security incident
  8. June 19, 2026 Salesforce disables Klue Battlecards integration

Why it matters

Your business data might be at risk. The Klue breach allowed unauthorized access to customer data, including business contacts and price quotes. If you use Salesforce or Klue, check your account for suspicious activity.

JQJO Editorial Desk · Human reviewed · AI assisted. Report a correction.

Editorial policy and corrections · Our team

Fired OpenAI Researchers Interview After Dismissal

Tap title to read story

0:00 / 0:22

PHP Vulnerability Sparks Global Response

Tap title to read story

0:00 / 0:47

Cybersecurity Threats Urge Infrastructure Patch

Tap title to read story

0:00 / 0:34

Xi Tightens Discipline Ahead of 2027 Reshuffle

Tap title to read story

0:00 / 0:38

Tom Skerritt Dies at Ninety‑Three

Tap title to read story

0:00 / 0:36

Teenage Girl Killed in Arcadia Home; Suspected Shooter Fled and Attempted Suicide in Pasadena

Tap title to read story

0:00 / 0:10

Sixers Complete 29‑Point Comeback to Beat Cavaliers 114‑106

Tap title to read story

0:00 / 0:28

Chrome Enhances Protection with Suspicious Alerts

Tap title to read story

0:00 / 0:28

Switch 2 Jailbreak Exposes Homebrew Vulnerability

Tap title to read story

0:00 / 0:42

Microsoft’s Xbox Helix Could Cost Up to $1,800, Says Fortune Report

Tap title to read story

0:00 / 0:38

JQJO

Find your next story

Search JQJO’s current coverage.