Salesforce has publicly confirmed a security incident involving a third-party application, the Gainsight customer success platform. The breach resulted from unauthorized access to a Gainsight production environment that integrated with the Salesforce platform. This report contains the established facts of the incident and the official guidance issued to customers.

Details of the Compromise

The security event was first identified by Salesforce’s internal security team after detecting anomalous activity related to the Gainsight integration. A subsequent investigation confirmed that an unauthorized third party had gained access to one of Gainsight’s production environments. This access exposed customer data that was stored within the Gainsight application. The investigation has determined that the exposed information is related to customer engagement and success metrics. The direct Salesforce environment was not breached as part of this incident; the point of compromise was the third-party platform.

Official Response and Customer Actions

Upon discovery, Salesforce and Gainsight initiated a joint investigation and took immediate action to contain the incident. The compromised integration points between the two platforms were disabled to prevent any further unauthorized activity. Salesforce has commenced the process of notifying all customers confirmed to be affected by this breach.

Salesforce has issued the following guidance for customers:

Customers are advised to review their access logs for any unusual activity associated with user accounts connected to the Gainsight application. As a precautionary measure, companies using the integration are instructed to enforce a mandatory password reset for all users who had access to the Gainsight platform. Continuous monitoring of Salesforce environments for any unauthorized changes or data access is also recommended. Both companies are continuing their investigation to determine the full scope of the event.

Source: https://www.helpnetsecurity.com/2025/11/21/salesforce-gainsight-compromise/