Salesforce dealing with trust issues and potential lawsuit due to cyberattacks

As Salesforce customers grapple with a challenging year filled with cyberattacks, concerns about the company’s ability to prioritize security have surfaced. Despite Salesforce’s longstanding emphasis on trust as a core value since its inception in 1999, recent breaches have cast doubt on the effectiveness of its security measures. A recent report by ZDNET indicates that Salesforce could enhance its security protocols to prevent the exploitation of vulnerable components within its platform, which cybercriminals have recently targeted.

The year 2025 has proven to be quite brutal for Salesforce clients, with numerous high-profile organizations falling victim to data breaches and subsequent ransom demands involving sensitive customer information. While some companies have openly attributed these attacks to Salesforce, others have been more discreet, referring only to a third-party application in their disclosures. Media reports have strongly suggested Salesforce’s involvement in many of these incidents, prompting the FBI to issue a warning about the compromised accounts linked to Salesforce. The aftermath of these attacks has led to 14 customers pursuing legal action against the CRM giant.

Despite Salesforce’s assertion that its platform has not been compromised and the attacks are not attributable to vulnerabilities in its technology, the reality remains grim for affected organizations. The company acknowledged that threat actors have targeted customers’ instances through various tactics, including phishing schemes aimed at stealing credentials and multi-factor authentication tokens. Notable companies such as Allianz Life, LVMH, Quantus, Cisco, Chanel, Google, and Workday have been identified as victims, with more organizations joining the list in recent weeks.

The breach discovered at TransUnion in July 2025, attributed to a third-party application, further highlights the ongoing challenges faced by Salesforce customers in safeguarding their data. These alarming developments have underscored the pressing need for Salesforce to bolster its security defenses and protect its clients from malicious cyber activities. Efforts to enhance cybersecurity measures are imperative to restore trust and security among Salesforce users, who have entrusted the platform with their sensitive information.

In response to these escalating concerns, key industry players such as AppOmni, Google Cloud Mandiant, and Okta have lent their expertise to help Salesforce address the vulnerabilities within its platform. Collaborative efforts between cybersecurity experts and Salesforce’s executive team, including Chief Trust Officer Brad Arkin, are essential to fortifying the platform against future threats and ensuring the safety of customer data.

As Salesforce grapples with these security challenges, the company must prioritize proactive security measures, conduct regular security audits, and enhance training for employees and third-party support workers to mitigate risks effectively. By reinforcing its commitment to safeguarding customer data and maintaining transparency in addressing security issues, Salesforce can rebuild trust among its user base and safeguard its reputation as a leading CRM provider.