Salesloft Drift OAuth Token Breach Exposes Salesforce and Google Workspace Data

Originally published at: Salesloft Drift OAuth Token Breach Exposes Salesforce and Google Workspace Data - ToolsLib Blog

In August 2025, Google Threat Intelligence confirmed a major security incident involving Salesloft Drift. Attackers stole OAuth tokens, exfiltrated Salesforce data, and accessed some Google Workspace accounts. Learn how the breach happened, what data was exposed, and the urgent steps organizations must take to secure their environments.