3/18/2026 · 1 min read
salesforcesecuritydata-breachshinyhuntersexperience-cloudcybersecurity
The ShinyHunters hacking group is threatening Salesforce customers, demanding payment to prevent the exposure of compromised data. This group, linked to recent Experience Cloud hacks, has given an ultimatum to businesses targeted via their Salesforce instances.
Salesforce is warning customers about a new threat campaign by the ShinyHunters hacking group, exploiting overly permissive guest user configurations in Salesforce Experience Cloud sites, potentially breaching hundreds of companies.
Canada's largest grocer, Loblaw, is investigating a significant data breach that allegedly exposed 75.1 million Salesforce customer records among other sensitive data. A threat actor has set a March 19 deadline for Loblaw to respond, threatening a public leak if no contact is made.
Salesforce shares critical cybersecurity advice to help organizations defend against the notorious ShinyHunters extortion campaign. The article emphasizes proactive strategies to protect data and mitigate the impact of sophisticated cyber threats.