Proofpoint Hit By Security incident at Salesloft, Customer Data Not at Risk

The attack came to light after Salesforce, the platform on which the application ran, alerted Proofpoint to suspicious activity. Salesforce immediately took action by disabling all instances of the Drift application and removing it from its AppExchange. Proofpoint responded by immediately disconnecting the application and launching an internal investigation.

The investigation has since revealed that an unauthorized party gained access to Proofpoint’s Salesforce environment through the compromised Drift integration. This party viewed “certain information” stored in the Salesforce database.

Proofpoint emphasizes that till now there is no evidence that the incident has compromised its software, services, security products, or customer data. The company says that it is closely monitoring the situation and is in contact with both Salesforce and Salesloft. If further investigation reveals that sensitive data has been misused, the affected individuals and organizations will be notified.