Salesforce Gainsight compromise: Early findings and customer guidance In the wake of Salesforce’s announcement about “unusual activity involving Gainsight-published applications” and the company’s revocation of access and refresh tokens associated with them, Gainsight has been doing a good job keeping customers updated on current investigation findings. On the status page following the incident, the company confirmed that, as a precautionary measure, the Gainsight app has been temporarily pulled from the Hubspot Marketplace and Zendesk connector access has been revoked. They have also shared that: The suspicious activity Salesforce detected were API calls using the Gainsight Connected App coming from non-whitelisted IPs. Salesforce has yet to confirm data exfiltration from customer…