1/18/2026 · 10 min read
salesforcesecuritydata-breachsocial-engineeringconnected-appsevent-monitoring
Salesforce customers faced widespread data theft in 2025 due to social engineering and compromised connected apps, not platform vulnerabilities. The incidents underscore critical challenges with identity complexity, org visibility, and the necessity for robust detection strategies.
A new class-action lawsuit claims Louis Vuitton failed to prevent a significant data breach by ignoring explicit security warnings from Salesforce and Google about voice phishing attacks. The lawsuit alleges Louis Vuitton's negligence led to customer data theft, highlighting the importance of heeding vendor security recommendations.
Salesforce's AppExchange partner program and integration data access policies are facing renewed scrutiny, with Fivetran's CEO claiming the stricter model is harming customers. Salesforce defends these changes as vital for enhancing security and trust across its vast third-party ecosystem.
This article introduces a Salesforce Admins Podcast episode featuring Laura Pelkey and Kylie McKlveen, focusing on a practical framework for admins to enhance their organization's security posture. It aims to guide Salesforce administrators in moving from passive to intentional security management.