Workday Third-Party Cyberattack Linked to ShinyHunters

**Workday Hit by Third-Party Cyberattack Linked to ShinyHunters** Workday, a leading HR platform provider, disclosed a cyberattack on **16–17 August** after threat actors breached its systems via a third-party supplier. The incident appears tied to a broader wave of attacks likely orchestrated through **Salesforce products** linked to the **ShinyHunters cybercrime group**, though Workday did not confirm the specific threat actor or software involved. In a public notice, Workday revealed that attackers accessed limited data from its **third-party CRM platform**, primarily **business contact information** such as names, email addresses, and phone numbers. The company emphasized that **no customer tenant data or internal systems** were compromised. Immediate containment measures were taken, including revoking access and implementing additional safeguards. The breach stemmed from a **social engineering campaign** targeting multiple large organizations, with the stolen data potentially intended for further phishing scams. Workday clarified that it **never requests passwords or sensitive details via phone**, urging users to verify communications through official support channels. The incident underscores the growing risk of **supply chain attacks**, where cybercriminals exploit vulnerabilities in third-party vendors to infiltrate larger targets. While the full scope of the campaign remains under investigation, the attack aligns with recent tactics attributed to **ShinyHunters**, a group known for high-profile data breaches.