Toast, GreenSky, LLC and Fenergo · AI used against the institution · severity 3 of 5
In August 2025 attackers used OAuth tokens stolen from Salesloft's Drift, which FINRA described as an AI chat agent, to query the Salesforce instances of more than 700 organisations; FINRA called it an "AI supply chain attack". Three financial-technology firms confirmed exposure. Payments company Toast said contact details and support-case content were queried between 12 and 15 August. GreenSky, a program administrator for banks that offer consumer loans, told state attorneys general that several customer-related databases were accessed between 13 and 18 August and offered credit monitoring. Regtech Fenergo said a portion of its corporate CRM data was accessed but no customer platform was affected. The AI product was the compromised integration, not the attack tool. Each firm disconnected Drift or ended its Salesloft relationship.
Record last reviewed Oct 21, 2026 · Markdown
Date
Aug 12, 2025 · disclosed Aug 21, 2025
Institution
Toast, GreenSky, LLC, Fenergo
Country
Several countries
AI system
Drift · AI chat agent connected to Salesforce and Google Workspace via OAuth tokens (the compromised integration, not the attack tool) · vendor: Salesloft
AI?
Described as AI by the institution or regulator
The institution, a regulator or a court called the system AI.
Status
Confirmed by the institution
Severity
3 of 5
Impact
Not totalled. Toast said queries were limited to contact information, support-case content and Salesforce logs; GreenSky's filing with the Maine Attorney General gives the total affected as "N/A" (one Maine resident); Fenergo said only internal CRM data was accessed. FINRA said more than 700 organisations were affected by the wider campaign. · FINRA said exposed data could raise the risk of credential stuffing, spear phishing and social-engineering attacks against member firms and their vendors.
What happened?
Google Threat Intelligence Group (Mandiant) reported on 26 August 2025 that a threat actor it tracks as UNC6395 targeted Salesforce customer instances from as early as 8 August through at least 18 August 2025, using compromised OAuth tokens associated with the Salesloft Drift application, and systematically exported large volumes of data to hunt for credentials such as AWS keys, passwords and Snowflake tokens. On 20 August Salesloft and Salesforce revoked all active Drift tokens. FINRA later alerted its member firms that the breach "impacted more than 700 organizations" and described Salesloft Drift as a platform "that connects the Drift AI chat agent with a Salesforce or Google Workspace instance".[1][2]
The AI system's role was as the trusted, compromised integration: FINRA said the breach "targeted weaknesses in Salesloft's Drift chatbot integrations rather than in Salesforce or Google Workspace directly", and that stolen tokens let attackers impersonate the Drift application and bypass multi-factor authentication. No source reviewed says AI was used to carry out the attack.[1][2]
Toast said it learned of the issue on 26 August 2025, disconnected Drift and invalidated its tokens. Its investigation found that between 12 and 15 August an actor used credentials stolen from Salesloft to run queries on a small number of tables in Toast's Salesforce instance, limited to contact information (name, email, business address), support-case content such as hardware lease status, pricing and billing questions, and Salesforce logs and configuration data.[3]
GreenSky, which describes itself as a bank-directed program administrator and technology provider to banks that offer consumer loans, said it received a report of the Drift issue on 21 August 2025. Its forensic investigation found that several customer-related GreenSky databases were accessed by an unauthorized actor between 13 and 18 August 2025. In notices filed with state attorneys general in late October 2025 it said it had terminated its relationship with Salesloft and offered affected people 24 months of credit monitoring through Cyberscout.[4][5]
Fenergo, a client-lifecycle and compliance software provider to financial institutions, said Salesloft alerted it on 21 August 2025 to suspicious activity linked to Drift. It said the attacker had queried its Salesforce platform through the Drift integration and accessed a portion of internal customer relationship management information, but that no data in its customer platforms, including SaaS and Fen Cloud, was accessed, altered or exfiltrated.[6]
When did it happen?
- Aug 8, 2025
UNC6395 begins using stolen Drift OAuth tokens to export data from Salesforce instances, according to Google Threat Intelligence.[2]
- Aug 12, 2025
Queries against Toast's Salesforce instance begin (through 15 August), according to Toast.[3]
- Aug 13, 2025
Unauthorized access to customer-related GreenSky databases begins (through 18 August), according to GreenSky.[4][5]
- Aug 20, 2025
Salesloft and Salesforce revoke all active Drift access and refresh tokens; Salesforce removes Drift from AppExchange.[2]
- Aug 21, 2025
Salesloft alerts Fenergo, and GreenSky receives a report of the Drift security issue.[5][6]
- Aug 26, 2025
Google Threat Intelligence publishes its advisory; Toast learns of the issue and disconnects Drift.[2][3]
- Sep 18, 2025
Toast publishes its security update on the incident.[3]
- Oct 29, 2025
GreenSky notifies affected individuals and state attorneys general, offering 24 months of credit monitoring.[4][5]
What was the impact?
- Customers: Not totalled. Toast said queries were limited to contact information, support-case content and Salesforce logs; GreenSky's filing with the Maine Attorney General gives the total affected as "N/A" (one Maine resident); Fenergo said only internal CRM data was accessed. FINRA said more than 700 organisations were affected by the wider campaign.[1][3][4][6]
- Other: FINRA said exposed data could raise the risk of credential stuffing, spear phishing and social-engineering attacks against member firms and their vendors.[1][3][4][6]
Severity 3 of 5: Material harm across several financial firms: customer contact details, support-case content and customer-related databases were accessed through one compromised vendor integration, and GreenSky notified customers and state regulators and offered 24 months of credit monitoring.
How did Toast, GreenSky, LLC and Fenergo respond?
Toast said it disconnected the app, invalidated Drift's tokens and advised customers to rotate credentials, enable multi-factor authentication and watch for scams impersonating Toast or their bank. GreenSky said it "promptly terminated our relationship with Salesloft", engaged cybersecurity specialists and is reviewing its policies on storing sensitive information. Fenergo said it terminated its Drift connection and that the incident "did not affect any data used by Fenergo customers to conduct their business".[3][5][6]
What was the outcome, and did regulators act?
Drift tokens were revoked and the app was removed from Salesforce's AppExchange in August 2025; each named firm cut the Drift connection. FINRA urged member firms to disconnect Salesloft integrations, rotate credentials and review logs for 8 to 18 August 2025. No regulator action against Toast, GreenSky or Fenergo over the breach has been reported as of 21 October 2026.[1][2][3][5][6]
Which financial firms were hit by the Salesloft Drift breach?
Payments company Toast, consumer-loan program administrator GreenSky and regtech provider Fenergo each confirmed that attackers used stolen Drift tokens to access their Salesforce data in August 2025. FINRA said more than 700 organisations were affected overall and that it had notified member firms using affected vendors.
Was the Salesloft Drift breach an AI attack?
Not in the sense of AI being used as a weapon. FINRA called it an "AI supply chain attack" because Drift is an AI chat agent wired into Salesforce and Google Workspace; the attackers stole that integration's OAuth tokens and used them to impersonate it. No source says AI was used to carry out the theft.
What customer data was exposed at Toast, GreenSky and Fenergo?
Toast said contact details, support-case content and Salesforce logs were queried. GreenSky said several customer-related databases were accessed and notified affected people, offering 24 months of credit monitoring. Fenergo said only a portion of its internal CRM data was accessed and no customer platform was touched.
What did the firms change after the Drift breach?
Toast disconnected Drift and invalidated its tokens; GreenSky terminated its relationship with Salesloft and is reviewing how it stores sensitive data; Fenergo terminated its Drift connection. FINRA advised member firms to disconnect Salesloft integrations, rotate credentials and review logs for 8 to 18 August 2025.
- Cybersecurity Alert – Salesloft Drift AI Supply Chain Attack (undated; first archived 9 October 2025) official
- Widespread Data Theft Targets Salesforce Instances via Salesloft Drift security research
- Toast's Security Update Regarding the Salesloft Drift Incident official
- Data Breach Notice: GreenSky, LLC official
- GreenSky, LLC – Notice of Security Incident (consumer notification letter) official
- Fenergo Achieves Full Containment of Salesloft-Drift Data Breach official
When AI goes wrong at a bank, the next morning's brief says so.
when one of these regulators moves, the next morning's brief says so · six sourced stories · 7 am PT · free
plus every regulation, bank and agent page update, the morning after · leave any morning