Google confirms data breach exposed potential Google Ads customers’ info

What’s new: Google has confirmed a data breach involving one of its Salesforce CRM instances, which exposed basic business contact information of potential Google Ads customers. The breach was conducted by the threat actor group ShinyHunters, who have been targeting Salesforce customers. Exposed data includes business names, phone numbers, and related notes, but payment information was not compromised. Approximately 2.55 million records may have been affected.

Who’s affected

Potential Google Ads customers whose basic business contact information was stored in the compromised Salesforce instance are affected. The exact number of impacted individuals has not been disclosed by Google.

What to do

• Review and monitor any communications from Google regarding the breach.
• Ensure that any sensitive information related to Google Ads accounts is secured and monitored for unusual activity.
• Educate employees about social engineering tactics that may be used by threat actors.

Sources

• BleepingComputer