Many Public Salesforce Sites are Leaking Private Data

A shocking number of organizations -- including banks and healthcare providers -- are leaking private and sensitive information from their public Salesforce Community websites, KrebsOnSecurity has learned. The data exposures all stem from a misconfiguration in Salesforce Community that allows an unauthenticated user to access records that should only be available after logging in.

access a little sunshine banks charan akiri community data dc health dc health link healthcare healthcare providers huntington bank information latest warnings logging logging in matthew jennings mike rupert misconfiguration organizations private private data public salesforce salesforce community websites scott carbee sensitive information stem tcf bank the coming storm time to patch vermont websites