Avalara
Disclosed Sep 12, 20251 year agoConfirmed
Avalara Salesforce data stolen via Salesloft Drift OAuth tokens
Avalara said attackers with stolen Drift credentials accessed business contact details, Salesforce case information, sales operations data and billing line items; no payment data was exposed.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Sep 12, 2025 |
| Discovered | Aug 27, 2025 |
| Attack | Supply chain |
| Data exposed | Names, Emails, Phone numbers, Financial, Other |
| Sector | Tech · US |
| Status | Confirmed |
| Part of | Salesloft drift (2025) |
Sources
| Source | |
|---|---|
| Avalara statement on the Salesloft Drift incidentavalara.com · The organization | The organization |
| Salesloft Drift Breach: Track the Salesforce Incident (Nudge Security)driftbreach.com · News | News |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Sep 12, 2025 |
Same campaign
Other breaches at Avalara
| Breach | Affected | ||||
|---|---|---|---|---|---|
| Disclosed Jun 6, 2019Jun 6, 20197 years ago | Jun 6, 20197 years ago | Not stated | Tech | Confirmed | 1,251 |
History of this record
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.