Salesforce Customer Farmers Insurance Hit by Major Data Breach Affecting 1.1 Million Farmers Insurance, a U.S.-based provider, confirmed a data breach impacting 1.1 million customers after an unauthorized actor accessed a third-party database in May 2024. The exposed data included names, addresses, birth dates, driver’s license details, and partial Social Security numbers. The company detected the incident shortly after the intrusion and launched an investigation, notifying law enforcement. Affected individuals were informed on August 22, with regulators confirming the total number of impacted records. While Farmers Insurance did not disclose the compromised vendor, reports from Bleeping Computer indicate the breach involved Salesforce, a frequent target of cybercriminal groups. ShinyHunters, in collaboration with Scattered Spider, claimed responsibility, stating they exploited initial access provided by Scattered Spider to exfiltrate data from Salesforce CRM instances—similar to their recent attacks on Google (2.5M records) and suspected breaches at Workday, Qantas, Allianz Life, and Adidas. The attackers used social engineering tactics, tricking employees into approving malicious OAuth apps to gain access to Salesforce systems. This method highlights the growing threat to CRM platforms, which store vast amounts of sensitive data and are increasingly targeted due to their high-value information. Cybersecurity experts noted that the breach underscores vulnerabilities in third-party supply chains, emphasizing the need for continuous vendor risk assessments, zero-trust security models, and proactive monitoring to mitigate similar attacks. The incident also reinforces concerns about human-driven exploits as a primary attack vector, even in otherwise secure enterprise systems.