Update -
We continue to work closely with Salesforce on the ongoing investigation into the incident. In parallel, a forensic analysis is continuing as part of a comprehensive and independent review.
We will continue to share updates as the investigation progresses and provide additional information as it becomes available. Please refer to the current active FAQ: https://communities.gainsight.com/community-news-2/salesforce-gainsight-connected-app-incident-faqs-29809 which will be updated every 24 hours with any new information.
Nov 23, 2025 - 19:01 UTC
Update -
Salesforce - Gainsight Connected App Incident FAQ Update (November 22) - https://communities.gainsight.com/community-news-2/salesforce-gainsight-connected-app-incident-faqs-29809
We continue to work closely with Salesforce on the ongoing investigation into the incident. In parallel, a forensic analysis is continuing as part of a comprehensive and independent review.
We will continue to share updates as the investigation progresses and provide additional information as it becomes available.
Nov 23, 2025 - 01:35 UTC
Update -
Salesforce - Gainsight Connected App Incident FAQ (November 21st Update) - https://communities.gainsight.com/community-news-2/salesforce-gainsight-connected-app-incident-faqs-29809
We continue to work closely with Salesforce on the ongoing investigation into the incident. In parallel, a forensic analysis is continuing as part of a comprehensive and independent review.
We will continue to share updates as the investigation progresses and provide additional information as it becomes available.
Nov 22, 2025 - 06:11 UTC
Update - We continue to work closely with Salesforce on the ongoing investigation into the incident. In parallel, a forensic analysis is continuing as part of a comprehensive and independent review.
We will continue to share updates as the investigation progresses and provide additional information as it becomes available.
Nov 22, 2025 - 02:39 UTC
Update -
Salesforce has published an updated Security Advisory on unusual activity related to Gainsight-published applications.
https://help.salesforce.com/s/articleView?id=005229029&type=1
We continue to work closely with Salesforce as part of the ongoing investigation. Gainsight-published applications remain disconnected from Salesforce at this time.
We will provide further updates as additional information becomes available.
Nov 21, 2025 - 19:15 UTC
Update - We continue to work closely with Salesforce on the ongoing investigation into the connection issue affecting Gainsight-published applications on Salesforce.
In parallel, a forensic analysis is continuing as part of a comprehensive and independent review. We will continue to share updates as the investigation progresses and provide additional information as it becomes available.
Nov 21, 2025 - 17:22 UTC
Update -
We want to provide more information on the issue we shared earlier today. We have engaged Mandiant, a leader in cybersecurity, to assist us in our comprehensive, independent forensic investigation.
Our current findings indicate that the activity under investigation originated from the applications’ external connection — not from any issue or vulnerability within the Salesforce platform. Salesforce has independently notified known affected customers and continues to investigate.
As noted in the FAQ, (https://communities.gainsight.com/community-news-2/salesforce-gainsight-connected-app-incident-faqs-29809) Gainsight can provide the IP ranges and subnets that Salesforce login events from the Gainsight Connector should originate from. At this time, these details can only be shared through a support ticket. If you need this information, please open a ticket with our Support team.
We are committed to keeping you informed, and we appreciate your patience and partnership
Nov 21, 2025 - 05:38 UTC
Update - Investigation is ongoing and we will share updates as more information becomes available.
We appreciate your patience and understanding.
Nov 21, 2025 - 01:46 UTC
Update - Access to Gainsight via Salesforce remains unavailable at this time.
We continue to work closely with Salesforce to investigate and resolve the connection issue impacting Gainsight-published applications on the Salesforce platform. Salesforce has temporarily revoked active access tokens for Gainsight-connected apps as a precautionary measure while their investigation into unusual activity continues.
Our security and engineering teams are collaborating with Salesforce to analyze the technical details, validate configurations, and determine safe restoration steps. We are continuing to consolidate information internally and externally and will provide a detailed update within the next 1 hour.
Nov 21, 2025 - 00:26 UTC
Update - Customers using Hubspot might find that the Gainsight app has been temporarily pulled from the Hubspot Marketplace as a precautionary measure. This may also impact Oauth access for customer connections while the review is taking place.
We will work with Hubspot on re-listing after thorough review.
No suspicious activity related to Hubspot has been observed at this point. These are precautionary steps only.
Thank you for your patience, we will share additional updates as more information becomes available.
Nov 20, 2025 - 20:36 UTC
Update - We continue to work closely with Salesforce as they investigate the unusual activity that led to the revocation of access tokens for Gainsight-published applications.
Our internal investigation is ongoing, We will share additional updates as more information becomes available.
Nov 20, 2025 - 17:35 UTC
Update - We continue to investigate the Salesforce connection issue identified earlier today. Further updates will be provided as soon as more information is available.
Nov 20, 2025 - 11:22 UTC
Update - We are continuing to work on a fix for this issue.
Nov 20, 2025 - 07:56 UTC
Update - We are continuing to work on a fix for this issue.
Nov 20, 2025 - 07:34 UTC
Update - We are actively investigating the issue and continuing to monitor the situation closely. We will share further updates as soon as more information becomes available.
Nov 20, 2025 - 07:22 UTC
Identified -
We have identified connection failures resulting from Salesforce revoking active access for Gainsight SFDC Connector. https://status.salesforce.com/generalmessages/20000233
This is currently causing disruptions to Gainsight functionalities that rely on synchronous or real-time API interactions with Salesforce.
We are investigating further and will update as we have more details.
Nov 20, 2025 - 04:33 UTC
Investigating - We are investigating reports of Salesforce Connection failures.
We will update soon as we have more details.
Nov 20, 2025 - 03:53 UTC