2026 8x8 — Klue integration used to copy Salesforce CRM data; customer contact details and sales notes exfiltrated
Data compromised
Fragmented contract and opportunity records, sales team notes, and customer contact details (names, business addresses, phone numbers and email addresses) for current, former and prospective customers. 8x8 describes the data as competitively sensitive. No count disclosed.
Technical writeup
Item 1.05 Form 8-K dated June 17, 2026. 8x8 learned of the intrusion on June 13, 2026; the access occurred June 11–12. The company says the incident is not expected to have a material impact on operations and that its investigation of the extent of the incident is continuing. Part of the Klue OAuth supply-chain wave against Salesforce tenants (see klue-oauth-supply-chain2026). recordsAffected 0 (no count in the filing).
Root cause
An unauthorised party exploited the Klue Labs third-party application integration connected to 8x8’s Salesforce CRM. 8x8 says it and Klue, with Salesforce’s support, disabled the integration and removed the unauthorised access.