Salesforce-Connected Third-Party Drift Application Incident Response - Palo Alto Networks

___ Blog Palo Alto Networks CIO/CISO Salesforce-Connected Thir... Salesforce-Connected Third-Party Drift Application Incident Response Link copied By Marc Benoit Sep 02, 2025 1 minutes CIO/CISO Incident Response Unit 42 data breach security advisory Unit 42 Threat Brief Last week, Salesloft announced its Drift application was breached, which provided unauthorized access to its customer's Salesforce data. This supply chain attack impacted hundreds of organizations, including Palo Alto Networks. As soon as we learned of the event, we disconnected the vendor from our Salesforce environment and our Unit 42 security teams launched a comprehensive investigation. Our investigation confirms the incident was isolated to our CRM platform; no Palo Alto Networks products or services were impacted, and they remain secure and fully operational. The data involved includes mostly business contact information, internal sales account and basic case data related to our customers. We take this incident seriously and are reaching out to a limited number of customers that have potentially more sensitive data exposed. If you have concerns or need additional support, our teams are available via Palo Alto Networks customer support channels. For additional technical details, guidance for breach victims, and recommended mitigations, please refer to our Unit 42 Threat Brief. Related Blogs Announcement, Incident Response, Products and Services, Threat Prevention, Unit 42 Introducing Unit 42 Managed XSIAM 2.0 AI and Cybersecurity, AI Security, Cybersecurity, Data Security, Incident Response, Reports, Unit 42 The Case for Multidomain Visibility Announcement, Must-Read Articles, Reports, Threat Advisories - Advisories, Unit 42 2026 Unit 42 Global Incident Response Report — Attacks Now 4x Faster Partners, Unit 42 Unit 42 Incident Response Retainer for AWS Security Incident Response AI Security, CIO/CISO, Points of View A CIO’s First Principles Reference Guide for Securing AI by Design Points of View, Reports, Unit 42 Why Threat Actors Succeed Subscribe to the Blog! Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more. Sign up Please enter a valid email. By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement. Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder. This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. Products and Services AI-Powered Network Security Platform Secure AI by Design Prisma AIRS AI Access Security Cloud Delivered Security Services Advanced Threat Prevention Advanced URL Filtering Advanced WildFire Advanced DNS Security Enterprise Data Loss Prevention Enterprise IoT Security Medical IoT Security Industrial OT Security SaaS Security Next-Generation Firewalls Hardware Firewalls Software Firewalls Strata Cloud Manager SD-WAN for NGFW PAN-OS Panorama Secure Access Service Edge Prisma SASE Application Acceleration Autonomous Digital Experience Management Enterprise DLP Prisma Access Prisma Browser Prisma SD-WAN Remote Browser Isolation SaaS Security AI-Driven Security Operations Platform Cloud Security Cortex Cloud Application Security Cloud Posture Security Cloud Runtime Security Prisma Cloud AI-Driven SOC Cortex XSIAM Cortex XDR Cortex XSOAR Cortex Xpanse Unit 42 Managed Detection & Response Managed XSIAM Threat Intel and Incident Response Services Proactive Assessments Incident Response Transform Your Security Strategy Discover Threat Intelligence Company About Us Careers Contact Us Corporate Responsibility Customers Investor Relations Location Newsroom Popular Links Blog Communities Content Library Cyberpedia Event Center Manage Email Preferences Products A-Z Product Certifications Report a Vulnerability Sitemap Tech Docs Unit 42 Do Not Sell or Share My Personal Information This site uses cookies essential to its operation, for analytics, and for personalized content and ads. By continuing to browse this site, you acknowledge the use of cookies. Manage My Cookie Settings Your Opt Out Preference Signal is Honored Privacy Preference Center When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. This information might be about you, your preferences or your device and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies. Click on the different category headings to find out more and change our default settings. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer. More information on cookie consent Allow All Manage Your Consent Preferences Strictly Necessary Cookies Always Active These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms.    You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information. Performance Cookies Performance Cookies These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site.    All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site, and will not be able to monitor its performance. Functional Cookies Functional Cookies These cookies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages.    If you do not allow these cookies then some or all of these services may not function properly. Targeting Cookies Targeting Cookies These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites.    They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising. Cookie List Clear checkbox label label Apply Cancel Consent Leg.Interest checkbox label label checkbox label label checkbox label label Reject All Confirm My Choices