Workday HR Platform Becomes Latest Target in Salesforce Breach Campaign

Workday is a prominent HR platform utilised by over 11,000 organisations globally, including more than 60 per cent of the Fortune 500. The company employs over 19,300 individuals across North America, Asia-Pacific and Japan (APJ), as well as Europe, the Middle East and Africa (EMEA). Recently, Workday disclosed in a blog post that threat actors employed social engineering techniques to breach a Workday-controlled instance of a third-party Customer Relationship Management (CRM) system, leading to the exfiltration of data.

In their communication, Workday informed that the breach occurred on 6 August and involved threat actors impersonating HR and IT staff through text messages and phone calls to gain access to employee accounts and personal information. While there was no evidence of access to customer tenants or their data, some customer data and business contact information were compromised. This data primarily consisted of publicly available information, including names, phone numbers, and email addresses, which Workday cautioned could be exploited in future social engineering attacks. 

Categories: Data Breach, Social Engineering, Cybersecurity 

Tags: Workday, HR, Platform, Organisations, Breach, Data, Exfiltration, Social Engineering, CRM, Threat Actors