Workday, the HR technology giant, has confirmed a data breach that gave hackers access to personal information stored in one of its third-party CRM databases.
The type of information that threat actors got their hands on was “primarily commonly available business contact information, like names, email addresses, and phone numbers, potentially to further their social engineering scams,” writes a Workday blog post published Friday. The company further added that “there is no indication of access to customer tenants or the data within them.”
The Workday breach follows a string of recent attacks on Salesforce-hosted databases executed by ShinyHunters. Google, Qantas, Cisco, and Pandora have all fallen victim to data theft from their Salesforce platforms.
Attributing its Salesforce breaches to ShinyHunters, Google said that the hacker group may be preparing a data leak site to extort victims into paying them to delete the data.
Although Workday did not confirm the compromised third-party database, the attack is likely another instance of the long-running campaign targeting major organizations. Regarding post-breach countermeasures, Workday said, “We acted quickly to cut the access and have added extra safeguards to protect against similar incidents in the future.”
Serving over 11,000 corporate customers and around 70 million users globally, Workday reportedly discovered the breach earlier this month. The company did not disclose whether the stolen data belonged to its employees or customers, nor did it mention the number of individuals whose data was compromised.
The human resources firm clarified its communications procedure, saying, “It’s important to remember that Workday will never contact anyone by phone to request a password or any other secure details. All official communications from Workday come through our trusted support channels.”
TechIntelPro empowers B2B technology decision-makers with the latest industry trends, deep insights, leadership perspectives and actionable intelligence to drive both organizational and professional milestones—and thrive on the tech pulse.