Hootsuite | Trust Center

Hootsuite was recently made aware of a security incident involving Salesforce/Gainsight which resulted in the compromise of authentication tokens for a subset of Gainsight customers.

Upon notification, Hootsuite’s Security Team immediately revoked the affected integration token and launched a forensic investigation. Our review of system and access logs confirmed that although an unauthorized party attempted initial connectivity checks, no customer data, proprietary information, or sensitive records were accessed or exfiltrated.

We have completed all necessary credential rotations and verified the integrity of our system. No action is required from Hootsuite customers at this time.

If you have any questions, please reach out to security@hootsuite.com.

Hootsuite has identified a phishing campaign that uses fake GitHub repositories and Search Engine Optimization (SEO) manipulation to target macOS users and entice them to download malware.

This activity is not the result of any compromise of Hootsuite systems, it arises from the fraudulent use of the Hootsuite name. Hootsuite is actively reporting these malicious repositories to GitHub and continues to monitor for similar threats.

Users are advised to avoid interacting with or downloading content from unverified third-party links. Suspicious communications claiming to be from Hootsuite can be forwarded to security@hootsuite.com for verification.

Hootsuite was made aware of the Salesloft Drift breach which resulted in attackers stealing authentication tokens, and Salesforce data from certain Salesloft's customers. Following a thorough security review, Hootsuite determined that our systems, data, and customers are not affected by this incident.

For any further questions, please reach out to security@hootsuite.com.