# Single Attacker Scraping Salesforce and ServiceNow Portals Since 2025

A single threat actor has been scraping data from portals built on Salesforce and ServiceNow since 2025, according to new research. The attacker likely exploits misconfigured portals to extract sensitive information from numerous organizations. This highlights ongoing risks posed by exposed customer and internal data in widely used enterprise platforms.

**Importance:** 3/5

## Sources

### Security
- [The Hacker News](https://thehackernews.com/2026/08/one-attacker-has-scraped-both.html) — Tue, 18 Aug 2026 17:00:00 +0530