Every public data breach

Disclosed this week44On record26,355

44 disclosed this week · 26,355 on record

Klue

Disclosed Jun 19, 2026Confirmed

Official notice

Klue legacy credential breach leads to OAuth token theft and Salesforce raids

Competitive intelligence platform Klue said attackers used a legacy 2022 integration credential to steal OAuth tokens connecting to customers' Salesforce environments. The Icarus group claimed the attack, and victims included security firms such as LastPass and 8x8.

What is known

People affectedNot stated in the sources we have
DisclosedJun 19, 2026
DiscoveredJun 12, 2026
AttackSupply chain
Data exposedCredentials and tokensAPI keysNamesEmailsMessages
SectorTech · CA
StatusConfirmed
Part ofKlue (2026)

Sources

Official noticeklue.com
An update on recent Klue security incident
Newsbleepingcomputer.com
Klue OAuth breach victim list grows as Icarus hackers claim attack

Notices filed

TotalJun 19
ResearchCount not stated

Same campaign

LastPassSupply chain exposed names, phone numbers, emails, addresses and messages.Supply chainTechUSJun 238x8Supply chain exposed names, addresses, phone numbers, emails and internal documents.Supply chainTechUSJun 23
History of this record
Added2026-09-25
First recordedby seedSource

First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.

Everything about Klue