Search/Klue OAuth breach linked to 'Icarus' Salesforce data theft attacks
● News

Klue OAuth breach linked to 'Icarus' Salesforce data theft attacks

Market intelligence platform Klue suffered a OAuth breach that enabled the "Icarus" threat actors to steal Salesforce CRM data from multiple organizations in an ongoing extortion campaign. Sources told BleepingComputer of the attack yesterday, telling us that numerous organizations had their Salesforce data stolen and were now being extorted by the relatively new extortion group. Cybersecurity firms ReliaQuest and Huntress have both published reports confirming the security incident, with Huntress stating that their Salesforce data was stolen in the attack. Salesforce has since disabled the Klue Battlecards integration on its platform while the breach is investigated. "To protect our customers, Salesforce has disabled the connection between the Klue Battlecards app, installed by…

Read original article
Source
bleepingcomputer.com
Published
Jun 18, 2026
Mentions
11
language: en
Connections
14 relationships