Pandora A.I CyberSecurity Scoring
Pandora
Company Information
Website:http://www.pandoragroup.com
Employees number:21,855
Number of followers:583,608
NAICS:4483
Industry Type:Retail Luxury Goods and Jewelry
Homepage:pandoragroup.com
Pandora Risk Score (AI oriented)
Between 600 and 649
PandoraRetail Luxury Goods and Jewelry
Updated:
05/09/2026
05/09/2026
633/1000
Poor
Caa
Pandora Global Score (TPRM)
xxxx
PandoraRetail Luxury Goods and Jewelry
Score locked

PandoraPoor
Current Score
633Caa (POOR)
01000
3 incidents
-50 avg impact
Incident timeline with MITRE ATT&CK tactics, techniques, and mitigations.
OCTOBER 2026
636
SEPTEMBER 2026
634
AUGUST 2026
631
JULY 2026
628
JUNE 2026
752
MAY 2026
751
APRIL 2026
750
MARCH 2026
750
FEBRUARY 2026
749
JANUARY 2026
702
DECEMBER 2025
702
NOVEMBER 2025
651
Breach
24 Nov 2025 • Pandora
Salesforce
Salesforce Data Breach: ShinyHunters Hack via Gainsight Integration
601
CRITICAL-50
GAI1122911112425
The Salesforce data breach involved the ShinyHunters (UNC6240) hacking group, which exploited stolen OAuth tokens from Salesloft’s GitHub account to infiltrate Drift’s Salesforce integration and subsequently compromise Gainsight, a customer process management platform. The attackers gained unauthorized access to over 200 Salesforce instances, exfiltrating enterprise customer data through third-party service integrations (including HubSpot and Zendesk). While Salesforce revoked access keys and removed affected apps from the AppExchange, the breach exposed sensitive customer data, though the full scope of the leak remains undisclosed. The attack leveraged supply-chain vulnerabilities rather than a direct Salesforce platform flaw. ShinyHunters claimed delayed detection (1–2 weeks post-intrusion) and sought internal accomplices for further exploitation. Salesforce refused ransom demands, but the incident highlights risks in third-party integrations and credential-based attacks.
INCIDENT DETAILS -
TYPE
MOTIVATION
IMPACT
DATA BREACH
REFERENCES
AUGUST 2025
800
Breach
06 Aug 2025 • Pandora
Pandora
Pandora Data Breach via Third-Party Vendor
743
CRITICAL-57
PAN401080725
Danish jewellery giant Pandora disclosed a significant data breach involving a third-party vendor platform. The breach exposed customer names, phone numbers, and email addresses, but no passwords or payment data were accessed. The incident was contained swiftly, with no evidence of data exfiltration or public distribution. Pandora has warned customers about potential phishing attempts and is conducting a forensic analysis to determine the full scope of the compromise.
INCIDENT DETAILS -
TYPE
IMPACT
DATA BREACH
REFERENCES
AUGUST 2025
800
Breach
01 Aug 2025 • Pandora
Gainsight
Gainsight Unauthorized Salesforce Data Access via Stolen OAuth Tokens
690
CRITICAL-110
GAI0292402112125
The incident at Gainsight stemmed from a downstream effect of the August 2025 Salesloft breach, where the Scattered Lapsus$ Hunters group stole OAuth tokens tied to Salesloft’s Drift AI chat integration with Salesforce. These tokens granted unauthorized API access to 760 Salesforce instances, leading to the exfiltration of 1.5 billion records, including passwords, AWS keys, and Snowflake tokens.A subgroup, ShinyHunters, exploited the stolen credentials to breach Gainsight’s systems, extracting customer contact data (names, business emails, phone numbers, regional details), licensing information, and support case contents. Salesforce responded by revoking all active Gainsight-associated tokens and temporarily removing its apps from the AppExchange to mitigate further exposure. While Salesforce clarified that its platform itself was not vulnerable, the breach originated from Gainsight’s external app connections, compromising sensitive corporate and customer data across hundreds of organizations.
INCIDENT DETAILS -
TYPE
MOTIVATION
IMPACT
DATA BREACH
REFERENCES
Frequently Asked Questions
?
What is the current A.I Rankiteo Cyber Score for Pandora ??
What was Pandora's A.I Rankiteo Cyber Score in September 2026 ??
What was Pandora's A.I Rankiteo Cyber Score in August 2026 ??
What was Pandora's A.I Rankiteo Cyber Score in July 2026 ??
What was Pandora's A.I Rankiteo Cyber Score in June 2026 ??
What was Pandora's A.I Rankiteo Cyber Score in May 2026 ??
What was Pandora's A.I Rankiteo Cyber Score in April 2026 ??
What was Pandora's A.I Rankiteo Cyber Score in March 2026 ??
What was Pandora's A.I Rankiteo Cyber Score in February 2026 ??
What was Pandora's A.I Rankiteo Cyber Score in January 2026 ??
What was Pandora's A.I Rankiteo Cyber Score in December 2025 ??
What was Pandora's A.I Rankiteo Cyber Score in November 2025 ??
What is the average per-incident point impact on Pandora's A.I Rankiteo Cyber Score over the past 12 months ??
Where can I access detailed records of all cyber incidents associated with Pandora ??
Where can I find a summary of the A.I Rankiteo Risk Scoring methodology ??
Where can I view Pandora's profile page on Rankiteo ??
How accurate is the A.I Rankiteo Risk Scoring methodology ?