3/11/2026 · 3 min read
salesforceexperience-cloudsecuritydata-breachguest-usersshinyhunters
Salesforce is warning customers about a new threat campaign by the ShinyHunters hacking group, exploiting overly permissive guest user configurations in Salesforce Experience Cloud sites, potentially breaching hundreds of companies.
The ShinyHunters hacking group is threatening Salesforce customers, demanding payment to prevent the exposure of compromised data. This group, linked to recent Experience Cloud hacks, has given an ultimatum to businesses targeted via their Salesforce instances.
Canada's largest grocer, Loblaw, is investigating a significant data breach that allegedly exposed 75.1 million Salesforce customer records among other sensitive data. A threat actor has set a March 19 deadline for Loblaw to respond, threatening a public leak if no contact is made.
This article serves as a comprehensive guide for Salesforce Admins on the critical responsibility of user management, emphasizing profiles and permissions. It covers everything from user lifecycle management and license assignment to defining precise access levels and troubleshooting visibility issues.