NewsPublished 19 Jun 2026

Cybersecurity Firms Impacted by Klue Supply Chain Attack

Source SecurityWeek

Description

The hackers exfiltrated data from Salesforce instances of Klue customers, such as Huntress and Recorded Future. The post Cybersecurity Firms Impacted by Klue Supply Chain Attack appeared first on SecurityWeek .

Impact

The attack resulted in unauthorized exfiltration of business-related CRM data from Salesforce instances of Klue customers, including client contact information, price quotes, and sales messaging. Sensitive data such as threat intelligence, passwords, payment card information, or engineering telemetry was not accessed. The incident affected the confidentiality of business data for impacted customers. No direct compromise of the affected firms' own systems occurred. The disruption included disabling of OAuth tokens and integrations, impacting operational connectivity with Salesforce and other platforms.

Defensive guidance

Klue has deactivated all OAuth tokens and disabled affected integrations to contain the incident. Salesforce disabled the Klue Battlecards app integration to prevent further unauthorized access. Customers should verify that OAuth tokens have been reset and integrations remain disabled or are reconfigured securely. Monitor vendor advisories for any official patches or updates from Klue.

References

securityweek.com/cybersecurity-firms-impacted-by-klue-supply-chain-attack/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 19 Jun 2026, 09:20 UTC

References

Community reviews

Related threats