Klue

8x8 learned on June 13, 2026, that a threat actor exploited the Klue Labs application programming interface plugged into its Salesforce CRM. The filing names the vendor and the integration; it says nothing about what data moved through that connection or how many records. Klue has not said how many of its hundreds of customers are affected. Several companies have come forward to confirm they had data stolen during the attack, including Gong, Jamf, HackerOne, Insurity, OneTrust, Recorded Future, Snyk, Sprout Social, and Tanium.