Chanel targeted in a wave of Salesforce data theft attacks.

Chanel targeted in a wave of Salesforce data theft attacks.

French luxury fashion house Chanel has become the latest high-profile victim in a series of data thefts targeting companies that use Salesforce, one of the world’s leading cloud-based customer relationship management platforms. The breach at Chanel was first detected on July 25, 2025, and has raised significant concerns about the security of sensitive customer data in the fashion and retail sector.
The common thread behind the Qantas, Allianz Life, and LVMH attacks – ShinyHunters.

The common thread behind the Qantas, Allianz Life, and LVMH attacks – ShinyHunters.

In 2025, a sophisticated wave of data breaches shook some of the world’s most recognized companies—Qantas, Allianz Life, and LVMH. Investigations reveal these incidents are connected by a common thread: the ShinyHunters cyber extortion group. These attacks have been notable not only for the caliber of targeted organizations but for their focus on Salesforce-connected customer relationship management (CRM) platforms. Importantly, the breaches did not stem from vulnerabilities in Salesforce’s own infrastructure; rather, they exploited weaknesses at the user and organizational level.
More than 20 security issues, including five zero-day exploits, discovered in Salesforce Industry Cloud.

More than 20 security issues, including five zero-day exploits, discovered in Salesforce Industry Cloud.

AppOmni researchers identified over 20 security issues—including five zero-day vulnerabilities and numerous insecure configurations—in Salesforce Industry Cloud, particularly within its OmniStudio suite. These findings highlight the risks that can arise from default settings, low-code development shortcuts, and customer misconfigurations, potentially exposing sensitive business and personal data to unauthorized access.