In August 2025, hackers managed to hack into Drift, a Salesloft application, and used the OAuth tokens to Salesforce in that application to run queries and get access to data in Salesforce. As a result, PathFactory is facing questions about the security of the Salesforce OAuth tokens in our application as well as any impact on PathFactory systems as a result of the breach.
Salesforce Access
Like many software companies, PathFactory uses OAuth to connect to Salesforce. Where we differ from many other organizations is our mode of deployment, which offers the following protections:
- Third-Party Connector Shield: PathFactory uses a secure third-party connector that acts as an intermediary between our platform and other applications, such as Salesforce.
- Token Isolation: OAuth tokens are not stored on PathFactory’s systems or exposed to PathFactory users. These are maintained in a separate, hardened environment that follows enterprise security standards.
- No Direct Access: PathFactory users—including administrators—cannot access, view, or modify OAuth tokens. This eliminates the risk of token compromise through social engineering attacks or credential harvesting.
- Encrypted Token Management: All OAuth tokens are encrypted both in transit and at rest using industry-standard encryption protocols.
Impact on PathFactory Systems
PathFactory does not use Drift, the product that was breached. In addition, neither Salesloft nor Salesforce have informed us of any impact to PathFactory as a result of the breach.
Security isn’t a one and done activity – it’s an ongoing commitment. At PathFactory, we continuously enhance our security posture by conducting regular independent security audits and making sure our security controls meet or exceed industry standards like SOC2. Your data security is critically important to us, and we take its protection very seriously.
Views: 69