SpyCloud, Inc. Third-Party Breach (September 2025)

📅 2025-09-01 🏢 Drift (Salesloft)

Primary Source ↗

Incident Details

In 2025, SpyCloud, Inc. experienced a data security incident via a third-party vendor relationship. The compromised third-party vendor was Drift (Salesloft). Source reporting: https://spycloud.com/newsroom/salesloft-drift-incident-spycloud-response/

Technical Details

Initial Attack Vector: Compromise of third-party service provider / vendor relationship
Vendor / Product: Drift (Salesloft)
Supply Chain Attack: ✅ Confirmed third-party / vendor compromise

Timeline

2025-09-01 Breach occurred
2025-09-01 Publicly disclosed