\n<\/p>\n
Google has confirmed that some customers\u2019 information has been stolen in a recent breach of one of its databases.<\/p>\n
In a blog post<\/a> late on Tuesday, Google\u2019s Threat Intelligence Group said one of its Salesforce database systems, used to store contact information and related notes for small and medium businesses, was breached by a hacking group popularly known as ShinyHunters, formally designated as UNC6040.\u00a0<\/p>\n \u201cThe data retrieved by the threat actor was confined to basic and largely publicly available business information, such as business names and contact details,\u201d the company said.<\/p>\n Google did not disclose how many customers are affected, and a company spokesperson did not immediately respond to a request for comment. It\u2019s not clear if the company has received any communication, such as a ransom demand.\u00a0<\/p>\n ShinyHunters is known for targeting big companies and their cloud-based databases.<\/p>\n This is the latest in a series of breaches targeting Salesforce cloud systems, after recent thefts of customer data from Cisco<\/a> and airline giant Qantas<\/a>, retail giant Pandora<\/a>, among others, as reported by Bleeping Computer<\/a>. According to Google\u2019s blog post, the ShinyHunters group relies on voice phishing techniques to trick company employees into granting them access to their cloud-based Salesforce databases.<\/p>\n Google said the ShinyHunters group is likely preparing a data leak site, which some ransomware gangs use to publish stolen data to extort their corporate victims<\/a> into paying a ransom. The group is said to have overlaps with other groups, including The Com<\/a>, a known collective of cybercriminals who use hacking, extortion and sometimes threats of violence to break into networks. <\/p>\n