Hey followers! Today, let’s dive into a recent cyber incident involving Workday, a big name in HR tech, and some sneaky attacks on Salesforce databases.

Workday, which serves over 70 million users globally, confirmed a data breach where hackers stole some personal info from one of its third-party customer databases. They mainly took contact details like names, emails, and phone numbers. While there’s no clear evidence that customer data within their HR systems was accessed, the hackers could use the stolen info for social engineering scams.

The breach was discovered on August 6, and it appears linked to a pattern of cyberattacks targeting Salesforce-hosted databases. Many large firms like Google, Cisco, Qantas, and Pandora have also been hit recently, with data stolen from Salesforce storage, often by a group known as ShinyHunters.

Google pointed fingers at ShinyHunters, noting their methods include voice phishing to trick employees into granting database access. The group seems to be preparing for extortion, threatening to leak stolen data unless paid. Workday has not disclosed how many or which individuals were affected, nor revealed if they have the technical tools to determine exactly what was stolen.

Interestingly, Workday’s breach notice is hidden in their website source code with a ‘noindex’ tag, making it hard for the public to find, leaving some questions about transparency. The company has yet to comment further beyond their blog post.

So, what do you think about these cyber threats? Have you been impacted? Stay safe online, folks! And remember, keep your data guarded!