Workday Breached as Ransomware Group Seeks Salesforce Data

CRM Breach May Be Tied to Ongoing Scattered Spider and ShinyHunters Campaign Mathew J. Schwartz (euroinfosec) • August 18, 2025

Human resources and finance software giant Workday said hackers breached its customer relationship management software and stole customer data.

See Also: What Manufacturing Leaders Are Learning About Cloud Security - from Google’s Frontline

Workday said its attacker didn't appear to have breached the company's own cloud-based infrastructure, such as customer tenants or the data held there.

The company said the attacker "primarily" stole corporate contact details, such as names, email addresses and phone numbers, which could be employed in social engineering attacks. "It's important to remember that Workday will never contact anyone by phone to request a password or any other secure details," the firm said.

The breach alert from the publicly traded, $8.4 billion cloud-based software firm, founded in 2005 and headquartered in Pleasanton ...