Workday has confirmed a data breach that exposed personal information from one of its third-party customer relationship databases.

Workday provides HR technology to over 11,000 corporate customers, serving at least 70 million users globally.

The company said hackers accessed contact details such as names, email addresses, and phone numbers, but said there is no indication that customer tenants or the data stored within them were accessed.

Workday did not specify how many individuals were affected or whether the breach involved its employees or corporate customers.

The incident was discovered on August 6, according to Bleeping Computer.

Workday did not name the third-party platform involved.

The breach follows a series of cyberattacks targeting Salesforce-hosted databases used by large companies.

Google linked the attacks to the hacker group ShinyHunters, which is known for using voice phishing to gain access to corporate cloud databases.

Workday has not publicly disclosed further details about the breach.

🔗 Source: TechCrunch

🧠 Food for thought

1️⃣ ShinyHunters campaign reveals systematic targeting of third-party business platforms

The Workday breach represents part of a broader, coordinated campaign by the ShinyHunters hacking group targeting companies through their third-party business software platforms.

ShinyHunters has specifically focused on Salesforce-hosted databases, using social engineering tactics to impersonate IT support and gain access to sensitive customer data from major brands including Adidas, LVMH, and Google 1.

This approach demonstrates how cybercriminals are increasingly targeting the business software ecosystem rather than individual companies directly.

The group’s previous breach of Ticketmaster through vulnerabilities in Snowflake cloud storage affected 560 million users and resulted in 1.3 terabytes of stolen data 2.

Recent Workday developments