Data Analyst Intern

Security advisory: third-party security incident involving Klue. Information regarding a third-party Klue security incident involving Catchpoint's Salesforce environment, including scope, data involved, and response measures. June 26, 2026 LogicMonitor Security Team Get the latest blogs, whitepapers, eGuides, and more straight into your inbox. This site is protected by reCAPTCHA. What happened? Klue recently disclosed a security incident involving its platform, a third-party competitive intelligence solution that was integrated with Catchpoint's Salesforce environment. According to Klue, attackers compromised its integration infrastructure and used stolen OAuth credentials to gain unauthorized access to data available through connected Salesforce integrations. Upon learning of the incident, LogicMonitor immediately activated its incident response procedures and began working with Klue, Salesforce, and other relevant parties to investigate the matter. Its investigation has confirmed that unauthorized access to the Catchpoint Salesforce environment occurred. The Klue integration has since been removed, the unauthorized access has been contained, and its investigation into the full scope of the incident remains ongoing. The incident was limited to the Catchpoint Salesforce environment. LogicMonitor's primary Salesforce environment was not impacted. What information was involved? While the investigation is ongoing, at this time the data accessed appears to be limited to business relationship and sales activity data stored in Catchpoint's Salesforce environment. This includes business contact information, such as names, business email addresses, phone numbers, account information, sales opportunities, quotes, and other CRM records. By design, LogicMonitor, including Catchpoint, maintains secure and logical separation between its CRM systems and production systems. Salesforce is used to manage customer relationships and sales activity and does not store customer monitoring data, production systems data, authentication credentials, payment information, or other operational customer data. As a result, this information was not accessible through the Klue integration. Is there any action customers need to take? At this time, no action is required. LogicMonitor is communicating directly with affected customers and working with them in accordance with applicable laws and its contractual commitments. What is LogicMonitor doing? LogicMonitor is conducting a comprehensive investigation and forensic assessment to validate the full scope and extent of customer impact. LogicMonitor is closely monitoring the situation, implementing additional security measures as appropriate, and will provide further updates as new information becomes available. By LogicMonitor Security Team Disclaimer: The views expressed on this blog are those of the author and do not necessarily reflect the views of LogicMonitor or its affiliates.

Klue hack results in data breach at several cybersecurity firms. Published by itjadmin at June 22, 2026 A hacking group has taken credit for a breach at market intelligence provider Klue that allowed hackers to steal reams of data from the company's corporate customers, which include some of the biggest names in cybersecurity. Vancouver-based Klue, which lets companies conduct market research by connecting their data to its systems, said on Friday that hackers had stolen data from an unspecified number of its customers during a cyberattack a week earlier. (The blog contains the "noindex" code, which tells search engines to not list the page in search results.) Cybercrime group Icarus took credit for the breach, saying on its leak site that it will publish the stolen data on Monday if the company does not pay the hackers' ransom. Klue has not said how many of its hundreds of customers are affected. Several companies have come forward to confirm they had data stolen during the attack, including Gong, Jamf, HackerOne, Insurity, OneTrust, Recorded Future, Snyk, Sprout Social, and Tanium. This is the latest of a slew of broad-scale hacks in which hackers target companies that hold the keys to other companies' cloud databases. By breaching firms like Klue, hackers are betting that compromising a single point-of-failure will let them steal data from a large number of organizations at once. Over the past year alone, hackers have increasingly targeted similar middleware providers, including Gainsight and Salesloft, to gain access to hundreds of companies' data. Klue said hackers had gained access to the company's systems on June 12 using a "compromised legacy credential," such as a password or a token, associated with an integration tool that allows customers to link their company's cloud data to their Klue accounts. The hackers were able to steal data from Klue's customer clouds, such as Salesforce databases. Companies often store their customers' personal information in Salesforce databases, making these a prime target. Much of the stolen data includes business contact information, like names, email addresses, phone numbers, job titles, and some account information of their customers, according to the various affected companies. It's not clear how the hackers acquired the compromised credentials, or why Klue did not detect the theft sooner. Similar recent mass-hacks involving the compromise and misuse of credentials, such as at Snowflake and Tanstack, have been linked to employees inadvertently installing password-stealing malware on the devices that they use for work. Klue said it has called in incident response firm CrowdStrike, and has disconnected its integrations to prevent further access to customers' data. When contacted by TechCrunch on Monday, Klue CEO Jason Smith did not immediately respond to a request for comment, or answer questions about the incident, including if the company has received any communication from the hackers, such as a ransom demand. Huntress, one of the security companies that had its data stolen in the hack, said in its write-up of the incident that the hackers had contacted it with a ransom note using an Australian company's email address, whose servers were likely misused for the campaign. Last June, Klue said it was preparing to lay off around half of its staff, around 100 people, as it doubled down on its AI investments. It's not clear if the reduction in staff led to lapses in security at the company. It's not clear who, beyond Smith, is responsible for cybersecurity at the company. Do you know more about the Klue cyberattack? Are you a company affected by the breach? Itjockies would love to hear from you. To contact Zack Whittaker securely, reach out via Signal username zackwhittaker.1337 or by email: [email protected]. When you purchase through links in its articles, Itjockies may earn a small commission. This doesn't affect its editorial independence.