09/08/2025 | Press release | Distributed by Public on 09/08/2025 10:25
In August 2025, a cyberattack on Salesloft's Drift application resulted in unauthorized access to Salesforce CRM data from companies using the third-party app. Salesloft and Salesforce have since taken steps to disable the compromised connections and notify their affected customers. Like many companies, Dynatrace was among those affected by the Salesloft incident. We took immediate steps to protect our systems and customers. As of September 7th, we have been notified by Salesloft that the connections have been re-enabled.
Upon learning of the incident, we disabled Drift in our environment and launched an investigation with the assistance of third-party cybersecurity experts. Our investigation found the activity was limited solely to Salesforce, our CRM platform, which we use for customer management and marketing purposes. No Dynatrace products or services, including any systems containing customer data or any services that directly interface with customer systems, were affected. Moreover, Dynatrace does not use the case function in Salesforce and, as such, no case information was accessible as a result of the incident. The potentially affected data is limited to business contact information, including first and last names of customer contacts and company identifiers. There has been no disruption to our operations.
Because the data involved may include business contact information, we encourage customers to exercise extra caution. The following steps can help protect against phishing or social engineering attempts that could arise from this type of incident:
If you have any questions or concerns, please contact your account team or [email protected]. At Dynatrace, safeguarding our customers' privacy and security is paramount.